Industrial generator smart platform had insecure APIs that could enable remote control by anyone.