🤖 Arista VeloCloud Orchestrator (VCO) on-prem: actively exploited SQL injection zero-day. Any authenticated user, incl. read-only customer accounts, can escalate to operator privileges (full SD-WAN control). Patches released Oct 22.
🔗 https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/
#Exploit #0day #SDWAN #CyberSec
BleepingComputerArista patches new VeloCloud Orchestrator zero-day exploited in attacksArista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.