Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Summary

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.