The cloud service is the control plane for every device a vendor sells. A weakness there scales: one vulnerable API can expose every customer's devices and data.
Secure cloud interfaces with strong authentication, account lockout, TLS, and regular security testing, and avoid revealing whether accounts exist.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2014Latest
#06iot06-2014 Insecure Cloud Interface
