CVE-2021-44207

Description

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

Scoring

• CVSS: 8.1 (HIGH, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2024-12-23
• Remediation due date: 2025-01-13
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-798
• CWE-798

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md
• https://www.acclaimsystems.com
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md
• https://www.acclaimsystems.com
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44207

More from Acclaim Systems

• No other tracked CVEs for this vendor yet.