What is the CVSS score of CVE-2021-44207?

CVE-2021-44207 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 9.1%.

Which versions of Acclaim USAHERDS are affected by CVE-2021-44207?

CVE-2021-44207 presents notable security risk, a hard-coded credentials vulnerability rated CVSS 8.1.

Is CVE-2021-44207 being actively exploited?

Yes, CVE-2021-44207 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2021-44207?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Audit authentication configurations and rotate any potentially compromised credentials.

Acclaim USAHERDS CVE-2021-44207

HIGH

Use of Hard-coded Credentials (CWE-798)

2021-12-21 cve@mitre.org

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:19 vuln.today

Added to CISA KEV

Nov 10, 2025 - 14:43 cisa

CISA KEV

CVE Published

Dec 21, 2021 - 18:15 nvd

HIGH 8.1

DescriptionCVE.org

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

AnalysisAI

Acclaim USAHERDS livestock management system through version 7.4.0.1 uses hard-coded credentials, enabling unauthorized access to animal disease tracking data used by US state agricultural agencies.

Technical ContextAI

The CWE-798 hard-coded credential vulnerability means the application ships with known, unchangeable credentials that provide access to the management interface and underlying data. These credentials are identical across all USAHERDS deployments.

Affected ProductsAI

Acclaim USAHERDS through 7.4.0.1

RemediationAI

Contact the vendor for patches that allow credential customization. Restrict network access to USAHERDS instances. Monitor for unauthorized access using the known credentials.