ECOA building automation systems suffer from a cross site request forgery vulnerability. Many versions are affected. Continue reading...