Arista patches actively exploited VeloCloud Orchestrator zero-day
-
Arista Networks has released security patches for a zero-day vulnerability in VeloCloud Orchestrator (VCO) that is being actively exploited in the wild. The flaw affects VCO On-Prem deployments, meaning organizations running the orchestrator on their own infrastructure should treat this as urgent.
At this time, the source article does not provide a specific CVE ID or advisory number for this vulnerability, so no identifier is listed here. What is confirmed is that exploitation is ongoing, which raises the priority for affected administrators to patch without delay.
Mitigation steps to consider:
- Apply the security patches released by Arista Networks as soon as possible.
- Prioritize VCO On-Prem instances, since those are the deployments confirmed to be affected.
- Monitor your environment for signs of compromise and review access logs for unusual activity.
- If you cannot patch immediately, restrict exposure of the orchestrator to trusted networks and limit administrative access.
If your organization relies on VeloCloud Orchestrator for SD-WAN management, confirm whether you are running an on-premises deployment and verify your patch status against Arista's guidance.
Source: BleepingComputer
Is your organization running VCO On-Prem, and have you already applied the patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login