Full title: ECOA Building Automation System Authorization Bypass / Insecure Direct Object Reference Category: web applications Platform: hardware ECOA building automation systems suffer from authorization bypass and insecure direct object reference vulnerabilities. Many versions are affected. # 0day.today @ http://0day.today/