auren-research/cyber-sec huggingface dataset:
cveID: CVE-2024-40891
vendorProject: Zyxel
product: DSL CPE Devices
vulnerabilityName: Zyxel DSL CPE OS Command Injection Vulnerability
dateAdded: 2025-02-11
shortDescription: Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.
requiredAction: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
dueDate: 2025-03-04
knownRansomwareCampaignUse: Unknown
notes: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 ; https://www.zyxel.com/service-provider/global/en/security-advisories/zyxel-security-advisory-command-injection-insecure-in-certain-legacy-dsl-cpe-02-04-2025 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40891
cwes: CWE-78
cveID: CVE-2024-40890
vendorProject: Zyxel
product: DSL CPE Devices
vulnerabilityName: Zyxel DSL CPE OS Command Injection Vulnerability
dateAdded: 2025-02-11
shortDescription: Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
requiredAction: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
dueDate: 2025-03-04
knownRansomwareCampaignUse: Unknown
notes: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 ; https://www.zyxel.com/service-provider/global/en/security-advisories/zyxel-security-advisory-command-injection-insecure-in-certain-legacy-dsl-cpe-02-04-2025 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40890
cwes: CWE-78
cveID: CVE-2025-21418
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
dateAdded: 2025-02-11
shortDescription: Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-04
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21418 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21418
cwes: CWE-122
cveID: CVE-2025-21391
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Storage Link Following Vulnerability
dateAdded: 2025-02-11
shortDescription: Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-03-04
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21391
cwes: CWE-59
cveID: CVE-2025-0994
vendorProject: Trimble
product: Cityworks
vulnerabilityName: Trimble Cityworks Deserialization Vulnerability
dateAdded: 2025-02-07
shortDescription: Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-28
knownRansomwareCampaignUse: Unknown
notes: https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?; https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0994
cwes: CWE-502
cveID: CVE-2020-15069
vendorProject: Sophos
product: XG Firewall
vulnerabilityName: Sophos XG Firewall Buffer Overflow Vulnerability
dateAdded: 2025-02-06
shortDescription: Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-27
knownRansomwareCampaignUse: Unknown
notes: https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal ; https://nvd.nist.gov/vuln/detail/CVE-2020-15069
cwes: CWE-120
cveID: CVE-2020-29574
vendorProject: Sophos
product: CyberoamOS
vulnerabilityName: CyberoamOS (CROS) SQL Injection Vulnerability
dateAdded: 2025-02-06
shortDescription: CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.
requiredAction: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
dueDate: 2025-02-27
knownRansomwareCampaignUse: Unknown
notes: https://support.sophos.com/support/s/article/KBA-000007526 ; https://nvd.nist.gov/vuln/detail/CVE-2020-29574
cwes: CWE-89
cveID: CVE-2024-21413
vendorProject: Microsoft
product: Office Outlook
vulnerabilityName: Microsoft Outlook Improper Input Validation Vulnerability
dateAdded: 2025-02-06
shortDescription: Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-27
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413
cwes: CWE-20
cveID: CVE-2022-23748
vendorProject: Audinate
product: Dante Discovery
vulnerabilityName: Dante Discovery Process Control Vulnerability
dateAdded: 2025-02-06
shortDescription: Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-27
knownRansomwareCampaignUse: Unknown
notes: https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-23748
cwes: CWE-114
cveID: CVE-2025-0411
vendorProject: 7-Zip
product: 7-Zip
vulnerabilityName: 7-Zip Mark of the Web Bypass Vulnerability
dateAdded: 2025-02-06
shortDescription: 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-27
knownRansomwareCampaignUse: Unknown
notes: https://www.7-zip.org/history.txt ; https://nvd.nist.gov/vuln/detail/CVE-2025-0411
cwes: CWE-693
cveID: CVE-2024-53104
vendorProject: Linux
product: Kernel
vulnerabilityName: Linux Kernel Out-of-Bounds Write Vulnerability
dateAdded: 2025-02-05
shortDescription: Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-26
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024120232-CVE-2024-53104-d781@gregkh/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-53104
cwes: CWE-787
cveID: CVE-2018-19410
vendorProject: Paessler
product: PRTG Network Monitor
vulnerabilityName: Paessler PRTG Network Monitor Local File Inclusion Vulnerability
dateAdded: 2025-02-04
shortDescription: Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users with read-write privileges (including administrator).
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-25
knownRansomwareCampaignUse: Unknown
notes: https://www.paessler.com/prtg/history/prtg-18#18.2.41.1652 ; https://nvd.nist.gov/vuln/detail/CVE-2018-19410
cveID: CVE-2018-9276
vendorProject: Paessler
product: PRTG Network Monitor
vulnerabilityName: Paessler PRTG Network Monitor OS Command Injection Vulnerability
dateAdded: 2025-02-04
shortDescription: Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-25
knownRansomwareCampaignUse: Unknown
notes: https://www.paessler.com/prtg/history/prtg-18#18.2.39 ; https://nvd.nist.gov/vuln/detail/CVE-2018-9276
cwes: CWE-78
cveID: CVE-2024-29059
vendorProject: Microsoft
product: .NET Framework
vulnerabilityName: Microsoft .NET Framework Information Disclosure Vulnerability
dateAdded: 2025-02-04
shortDescription: Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-25
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29059
cwes: CWE-209
cveID: CVE-2024-45195
vendorProject: Apache
product: OFBiz
vulnerabilityName: Apache OFBiz Forced Browsing Vulnerability
dateAdded: 2025-02-04
shortDescription: Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-25
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://ofbiz.apache.org/security.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-45195
cwes: CWE-425
cveID: CVE-2025-24085
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Use-After-Free Vulnerability
dateAdded: 2025-01-29
shortDescription: Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-19
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/122066 ; https://support.apple.com/en-us/122068 ; https://support.apple.com/en-us/122071 ; https://support.apple.com/en-us/122072 ; https://support.apple.com/en-us/122073 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24085
cwes: CWE-416
cveID: CVE-2025-23006
vendorProject: SonicWall
product: SMA1000 Appliances
vulnerabilityName: SonicWall SMA1000 Appliances Deserialization Vulnerability
dateAdded: 2025-01-24
shortDescription: SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-14
knownRansomwareCampaignUse: Known
notes: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006
cwes: CWE-502
cveID: CVE-2020-11023
vendorProject: JQuery
product: JQuery
vulnerabilityName: JQuery Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2025-01-23
shortDescription: JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-13
knownRansomwareCampaignUse: Unknown
notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6 ; https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2020-11023
cwes: CWE-79
cveID: CVE-2024-50603
vendorProject: Aviatrix
product: Controllers
vulnerabilityName: Aviatrix Controllers OS Command Injection Vulnerability
dateAdded: 2025-01-16
shortDescription: Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-06
knownRansomwareCampaignUse: Unknown
notes: https://docs.aviatrix.com/documentation/latest/release-notices/psirt-advisories/psirt-advisories.html?expand=true ; https://nvd.nist.gov/vuln/detail/CVE-2024-50603
cwes: CWE-78
cveID: CVE-2025-21335
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
dateAdded: 2025-01-14
shortDescription: Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-04
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21335 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21335
cwes: CWE-416
cveID: CVE-2025-21334
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
dateAdded: 2025-01-14
shortDescription: Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-04
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21334 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21334
cwes: CWE-416
cveID: CVE-2025-21333
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
dateAdded: 2025-01-14
shortDescription: Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-04
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21333 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21333
cwes: CWE-122
cveID: CVE-2024-55591
vendorProject: Fortinet
product: FortiOS and FortiProxy
vulnerabilityName: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
dateAdded: 2025-01-14
shortDescription: Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-01-21
knownRansomwareCampaignUse: Known
notes: https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55591
cwes: CWE-288
cveID: CVE-2023-48365
vendorProject: Qlik
product: Sense
vulnerabilityName: Qlik Sense HTTP Tunneling Vulnerability
dateAdded: 2025-01-13
shortDescription: Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-03
knownRansomwareCampaignUse: Known
notes: https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510 ; https://nvd.nist.gov/vuln/detail/CVE-2023-48365
cwes: CWE-444
cveID: CVE-2024-12686
vendorProject: BeyondTrust
product: Privileged Remote Access (PRA) and Remote Support (RS)
vulnerabilityName: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
dateAdded: 2025-01-13
shortDescription: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-02-03
knownRansomwareCampaignUse: Unknown
notes: https://www.beyondtrust.com/trust-center/security-advisories/bt24-11 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12686
cwes: CWE-78
cveID: CVE-2025-0282
vendorProject: Ivanti
product: Connect Secure, Policy Secure, and ZTA Gateways
vulnerabilityName: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
dateAdded: 2025-01-08
shortDescription: Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.
requiredAction: Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.
dueDate: 2025-01-15
knownRansomwareCampaignUse: Known
notes: CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282 Additional References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0282
cwes: CWE-121
cveID: CVE-2020-2883
vendorProject: Oracle
product: WebLogic Server
vulnerabilityName: Oracle WebLogic Server Unspecified Vulnerability
dateAdded: 2025-01-07
shortDescription: Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-01-28
knownRansomwareCampaignUse: Unknown
notes: https://www.oracle.com/security-alerts/cpuapr2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-2883
cveID: CVE-2024-55550
vendorProject: Mitel
product: MiCollab
vulnerabilityName: Mitel MiCollab Path Traversal Vulnerability
dateAdded: 2025-01-07
shortDescription: Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-01-28
knownRansomwareCampaignUse: Known
notes: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55550
cwes: CWE-22
cveID: CVE-2024-41713
vendorProject: Mitel
product: MiCollab
vulnerabilityName: Mitel MiCollab Path Traversal Vulnerability
dateAdded: 2025-01-07
shortDescription: Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-01-28
knownRansomwareCampaignUse: Known
notes: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-41713 
cwes: CWE-22
cveID: CVE-2024-3393
vendorProject: Palo Alto Networks
product: PAN-OS
vulnerabilityName: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
dateAdded: 2024-12-30
shortDescription: Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-01-20
knownRansomwareCampaignUse: Unknown
notes: https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393
cwes: CWE-754
cveID: CVE-2021-44207
vendorProject: Acclaim Systems
product: USAHERDS
vulnerabilityName: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability 
dateAdded: 2024-12-23
shortDescription: Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.
dueDate: 2025-01-13
knownRansomwareCampaignUse: Unknown
notes: https://www.acclaimsystems.com/#contact ; https://www.tnatc.org/#contact ; https://nvd.nist.gov/vuln/detail/CVE-2021-44207
cwes: CWE-798