{
  "port": 6547,
  "protocol": "tcp",
  "service": "APC PowerChute agent UI",
  "oneLiner": "The web UI of APC's PowerChute UPS shutdown agent, registered to APC as apc-6547.",
  "whatItIs": "IANA registers 6547 to American Power Conversion as apc-6547. In practice it is the agent web interface of PowerChute Business Edition v10.x and PowerChute Serial Shutdown v1.x, served over HTTPS on the machine attached to the UPS. Schneider Electric's own FAQ says the port must be open in the host firewall to reach the agent UI, and that blocking it in the firewall is the supported way to restrict access to local only. It shows up on scans of server rooms, small-business file servers, and anything with a USB or serial UPS cable hanging off it.",
  "exposure": {
    "verdict": "never",
    "note": "This is the console that can shut a machine down on command. Schneider's own guidance is that PowerChute should not sit on a public-facing network segment."
  },
  "checkCommand": "curl -skI https://TARGET:6547/",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6547 (apc-6547)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6547",
      "kind": "iana"
    },
    {
      "title": "Schneider Electric — TCP and UDP ports used by each component of PowerChute",
      "url": "https://www.se.com/us/en/faqs/FA159597/",
      "kind": "official-docs"
    }
  ]
}