Handler on Duty: Rob VandenBrink
Threat Level: green
Loading...
|
|
Submitted By | Date |
---|---|
Comment | |
Dr. J | 2022-01-11 14:49:29 |
This protocol is not limited to APC but used by other UPS makers as well. For example Cyberpower. The messages are typically sent to "255.255.255.255" (broadcast). The source and the destination port is 3052. The content is a clear text XML snippet like: (parts redacted) <publish><data ver="1.1" hash="hmac-md5-128" boot="10251" upt="7162200" src="[redacted]" dst="" mac="[redacted]" dat="2022/01/11" tm="14:44:41" llc="2" slc="3" bs="false" mst="0" mdt="254"><inp s="g" u="120" a="24.0" v="115.3" f="60.0" z="47~63" t="115.4" b="115.2" l="102" h="131"></inp><out w="324" v="115.3" f="60.0" u="120" i="2 2 2 2 1 1 1 1 1 1" s="l" l="12" g="2700" p="3000" e="0" y="0" b="o o" t="0" c="15" d="120" ap="2.9" /><batt s="c" v="48" c="94" t="83" l="0" b="300" d="2020/02/11" /><sys s="n" t="29" n="UPS1" m="PR3000LCD" v="CR01207GAC1" e="PR6JW2000032" l="Server Room" o="Administrator" d="pass" f="n" c="true" r="o" /><env s="r" t="0" h="0"><cs n="Contact#1" s="1"/><cs n="Contact#2" s="1"/><cs n="Contact#3" s="1"/><cs n="Contact#4" s="1"/></env></data><auth code="[redacted]" /></publish> | |
2021-10-06 15:49:17 | |
In addition to APC other UPS vendors, such as PowerMaster, also use port 3052 for access to the UPS management interface. | |
Alan Walters | 2004-08-30 19:42:05 |
Port 3052 appears to be used to communicate with the Management card found inside the larger models of UPS's (such as the Matrix 5000) made by American Power Conversion (APC). In particular the PowerChute Network Shutdown software which runs as a Service on various Windows-based systems will periodically poll the Management card for information concerning the status of the UPS. Depending on the response received from the Management card the PowerChute software may initiate a clean shutdown of Windows and/or blast a message to all LAN connected systems (or just Admins) warning of impending shutdown. | |
Alan Walters | 2004-05-16 05:59:05 |
Port 3052 appears to be used to communicate with the Management card found inside the larger models of UPS's (such as the Matrix 5000) made by American Power Conversion (APC). In particular the PowerChute Network Shutdown software which runs as a Service on various Windows-based systems will periodically poll the Management card for information concerning the status of the UPS. Depending on the response received from the Management card the PowerChute software may initiate a clean shutdown of Windows and/or blast a message to all LAN connected systems (or just Admins) warning of impending shutdown. |
CVE # | Description |
---|