{
  "port": 3493,
  "protocol": "tcp",
  "service": "NUT (Network UPS Tools)",
  "oneLiner": "The upsd daemon from Network UPS Tools — battery status, and the commands that can shut machines down.",
  "whatItIs": "Network UPS Tools splits UPS monitoring into drivers, a network daemon (upsd) on TCP 3493, and clients such as upsc, upsmon, and the many NAS and home-automation integrations that poll it. The protocol is a simple line-oriented text protocol — LIST UPS, GET VAR ups.status, USERNAME/PASSWORD, INSTCMD — documented in RFC 9271. It shows up on Synology and QNAP boxes, Proxmox and TrueNAS hosts, and Raspberry Pis wired to an APC or Eaton UPS. Privileged clients can issue FSD, the forced-shutdown flag that tells every subscribed machine to power down.",
  "exposure": {
    "verdict": "never",
    "note": "Credentials and commands are plaintext unless you have explicitly configured NUT's optional TLS, and an authenticated peer can trigger a coordinated shutdown — keep upsd on the LAN and restrict it with LISTEN plus per-host ACLs."
  },
  "checkCommand": "upsc -l TARGET",
  "links": [
    {
      "title": "RFC 9271 — Uninterruptible Power Supply (UPS) Management Protocol",
      "url": "https://www.rfc-editor.org/rfc/rfc9271.html",
      "kind": "spec"
    },
    {
      "title": "NUT — upsd(8) manual page",
      "url": "https://networkupstools.org/docs/man/upsd.html",
      "kind": "official-docs"
    },
    {
      "title": "networkupstools/nut",
      "url": "https://github.com/networkupstools/nut",
      "kind": "github"
    }
  ]
}