cve-2021-44207
HIGH CVSS 8.1 cisa_known_exploited
Description
Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.
Timeline
- Published
- 2024-12-23
- Last Modified
- 2024-12-23
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 8.1,
"datePublished": "2024-12-23",
"dateUpdated": "2024-12-23",
"description": "Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.",
"dueDate": "2025-01-13",
"id": "CVE-2021-44207",
"kev_catalogs": [
"cisa"
],
"knownRansomwareCampaignUse": "Unknown",
"notes": "https://www.acclaimsystems.com/#contact ; https://www.tnatc.org/#contact ; https://nvd.nist.gov/vuln/detail/CVE-2021-44207",
"product": "USAHERDS",
"requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.",
"severity": "HIGH",
"source": "cisa_known_exploited",
"title": "Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ",
"vendor": "Acclaim Systems"
}