CVE-2021-44207

Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

Exploited in attacks High 8.1 Attack chance: 18%

What it is

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

CISA: Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.

Deadline for US federal agencies: January 13, 2025

Added to the CISA list: December 23, 2024
Published: December 21, 2021
Severity: High 8.1 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 18% in the top 2.9% of all known vulnerabilities
Weakness: CWE-798
More details: NVD · CVE.org · CISA

All references (2)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.