I don’t consider snmp to be a big issue, unless someone set up “public” with write access.
The ups software running on the windows machine would be running as system and would be able to execute whatever it wanted. Usually it’s connecting to the ups through some method (IP, usb serial) to figure out what state it’s in, how much runtime is remaining, and if it needs to execute any stored scripts.
How do you get a compromised UPS to upload scripts to the windows machine? That I’m not too sure about. I don’t think I’ve seen an ups management system that has that capability.
“Whiplash!” Was an old racing sim that had crazy tracks. It had collision damage and in single player mode you could give your teammate commands.
It supported 8 players on a lan in multiplayer. All of this while running from DOS. Looking back it seemed a little ahead of its time. I’ve never encountered anyone in person that knew of this game.
Ups software probably installed as system so that it can perform script execution and shutdown properly. That software communicates with the UPS directly. UPS vendors wouldn’t be at the top of my list of security-minded companies.