What is the CVSS score of CVE-2021-44207?

CVE-2021-44207 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 9.1%.

Which versions of Acclaim USAHERDS are affected by CVE-2021-44207?

CVE-2021-44207 presents notable security risk, a hard-coded credentials vulnerability rated CVSS 8.1.

Is CVE-2021-44207 being actively exploited?

Yes, CVE-2021-44207 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2021-44207?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Audit authentication configurations and rotate any potentially compromised credentials.

Acclaim USAHERDS CVE-2021-44207

HIGH

Use of Hard-coded Credentials (CWE-798)

2021-12-21 cve@mitre.org

8.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:19 vuln.today

Added to CISA KEV

Nov 10, 2025 - 14:43 cisa

CISA KEV

CVE Published

Dec 21, 2021 - 18:15 nvd

HIGH 8.1

DescriptionNVD

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

AnalysisAI

Acclaim USAHERDS livestock management system through version 7.4.0.1 uses hard-coded credentials, enabling unauthorized access to animal disease tracking data used by US state agricultural agencies.

Technical ContextAI

The CWE-798 hard-coded credential vulnerability means the application ships with known, unchangeable credentials that provide access to the management interface and underlying data. These credentials are identical across all USAHERDS deployments.

Affected ProductsAI

Acclaim USAHERDS through 7.4.0.1

RemediationAI

Contact the vendor for patches that allow credential customization. Restrict network access to USAHERDS instances. Monitor for unauthorized access using the known credentials.

CVE-2021-44207 vulnerability details – vuln.today

Back

Acclaim USAHERDS CVE-2021-44207

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code