CVE-2021-44207—Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

漏洞名称

Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

描述

Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.

其他说明

• https://www.acclaimsystems.com/#contact
• https://www.tnatc.org/#contact
• https://nvd.nist.gov/vuln/detail/CVE-2021-44207

相关新闻文章

• CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active ExploitationDecember 24, 2024

相关 CWE

• CWE-798