Arista Networks has issued security updates to remediate a zero-day vulnerability affecting its VeloCloud Orchestrator (VCO) On-Prem software. The company confirmed that the vulnerability has been utilized in active, ongoing attacks.
VeloCloud Orchestrator is a centralized management system used to configure and monitor wide-area network (WAN) services. The discovery of an actively exploited flaw necessitates prompt attention from organizations operating on-premises versions of the platform to mitigate the risk of unauthorized access or system compromise.
As of this reporting, Arista Networks is working to address the security gap, and administrators are encouraged to review official advisory documentation to apply the necessary patches. Given the nature of the exploit, users should prioritize the deployment of these updates to maintain the integrity of their network infrastructure.
Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/
Leave a Reply