Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
intelbras action_rf_1200_firmware 1.1.3