At this time, the source article does not provide a specific CVE ID or advisory number for this vulnerability, so no identifier is listed here. What is confirmed is that exploitation is ongoing, which raises the priority for affected administrators to patch without delay.

Mitigation steps to consider:

• Apply the security patches released by Arista Networks as soon as possible.
• Prioritize VCO On-Prem instances, since those are the deployments confirmed to be affected.
• Monitor your environment for signs of compromise and review access logs for unusual activity.
• If you cannot patch immediately, restrict exposure of the orchestrator to trusted networks and limit administrative access.

If your organization relies on VeloCloud Orchestrator for SD-WAN management, confirm whether you are running an on-premises deployment and verify your patch status against Arista's guidance.

Source: BleepingComputer

Is your organization running VCO On-Prem, and have you already applied the patch?