Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.
CWE-306, CWE-306