CISA Flags CVE-2021-44207 in Exploited Vulnerabilities Catalog: High Impact Alert

CISA added CVE-2021-44207—an Acclaim Systems USAHERDS vulnerability caused by hard-coded ValidationKey and DecryptionKey values (CWE-798) that can allow remote code execution if the static keys are obtained—to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation; the advisory explains impact, limited exploitability (requires obtaining the keys via another vector), recommended vendor mitigations or discontinuation, and urges remediation under BOD 22-01.