CVE-2021-41295

The ECOA BAS controller , an intelligent lighting control solution, contains a Cross-Site Request Forgery (CSRF) vulnerability. An authenticated attacker can remotely leverage a malicious web page to submit forged requests, enabling the execution of CRUD commands (GET, POST, PUT, DELETE) to perfo...

CVE-2021-41295 ECOA BAS controller - Cross-Site Request Forgery (CSRF)

ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands GET, POST, PUT, DELETE to perform arbitrary operations in the system...