Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).Referenceshttps://applied-risk.com/labs/advisorieshttp://www.securityfocus.com/bid/108686https://www.applied-risk.com/resources/ar-2019-008http://packetstormsecurity.com/files/155265/Optergy-Proton-Enterprise-BMS-2.0.3a-Cross-Site-Request-Forgery.html