High severity8.1NVD Advisory· Published Aug 6, 2021· Updated Jun 17, 2026

CVE-2021-38137

Description

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Corero/Securewatch Managed Services3 versions
cpe:2.3:a:corero:securewatch_managed_services:9.7.2.0020:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:corero:securewatch_managed_services:9.7.2.0020:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 9.7.2.0020

Patches

Vulnerability mechanics

References

www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/nvdThird Party Advisory
www.corero.com/blog/data-sheets-corero-securewatch-managed-services/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000