The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter.
https://www.sielco.org/en/contacts
https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-08