Actively exploited · Published Dec 21, 2021 · Assigned by mitre
CVE-2021-44207
High 8.1 Exploited
In plain English
A high-severity hard-coded credentials in USAHERDS from Acclaim Systems. Attackers are actively exploiting it in the wild (listed by CISA on December 23, 2024). The chance it is exploited in the next 30 days is estimated at 17.6% (higher than 97% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.
Federal agencies must remediate by Jan 13, 2025.
Official description
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.
Affected products (as reported)
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.acclaimsystems.com x_refsource_MISC
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44207 government-resource