CVE-2021-44207VulnerabilityPublished 12/23/2024Updated 10/24/2026
CVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Affects Acclaim Systems USAHERDSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 12/23/2024
- KEV deadline
- 01/13/2025
- EPSS
- 17.6% chance of exploitation in 30 days – higher than 97% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.
Description
Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.