CVEvulnerability

CVE-2021-44207

8.1 HIGH Known exploited Published 2021-12-21 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability — Acclaim Systems USAHERDS

Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

Added to KEV
2024-12-23
Remediation due
2025-01-13
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.
Notes
https://www.acclaimsystems.com/#contact ; https://www.tnatc.org/#contact ; https://nvd.nist.gov/vuln/detail/CVE-2021-44207
Status
Analyzed
Published
2021-12-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-798

Description

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

Affected configurations

• acclaimsystems usaherds (<= 7.4.0.1)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References