CVE-2021-38137: Corero Securewatch Managed Services

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

Affected products

• Corero Securewatch Managed Services: version 9.7.2.0020 only

Published 2021-08-06. Last modified 2026-06-17.