Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.