Penetration test of a multi-tenant platform for managing IoT devices