CVE-2021-44207

Timeline

Detection, updates, and resolution for this record.

1. Dec 21, 2021 · Catalog

   Detected

   Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

2. Dec 23, 2024 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.

3. Jan 13, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.

4. Jun 16, 2026 · Catalog

   Updated

   Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

Affected

• cpe acclaimsystems/usaherdsversion unspecified
• vendor Acclaim Systems USAHERDSversion unspecified

Sources

• CISA KEVCVE-2021-44207

  Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

  cisa.gov
• CVE.orgCVE-2021-44207

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-44207

  30-day exploitation probability 17.6%

  first.org
• NIST NVDCVE-2021-44207

  Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

  nvd.nist.gov

References

• Third Party Advisory · github.com
• CISA note · nvd.nist.gov
• Vendor Advisory · acclaimsystems.com
• CISA note · acclaimsystems.com
• US Government Resource · cisa.gov
• CISA note · tnatc.org