What’s Vulnerable › Vulnerabilities

CVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2024-12-23
• EPSS: 17.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-21 · updated 2026-06-17
• Weakness: CWE-798

Description

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

Affected products

• Acclaimsystems Usaherds: through 7.4.0.1

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md
• https://www.acclaimsystems.com
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md
• https://www.acclaimsystems.com
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44207

Get alerted when CVE-2021-44207 or the next vulnerability affects your stack