Arista patches actively exploited VeloCloud Orchestrator zero-day

By Sergiu Gatlan

AI Summary

Arista Networks released emergency patches for a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments that is actively being exploited, allowing remote attackers to access privileged internal functionality without authentication. The flaw is rated critical severity, and Arista urged immediate patching for all on-premises VCO deployments. SD-WAN administrators running Arista VeloCloud should treat this as an urgent remediation priority.

Read full article → https://www.bleepingcomputer.com/news/security/ari…

Relevance score: 80.0/100

# More from September 24

1
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers The Hacker News
2
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants The Hacker News
3
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks The Hacker News
4
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware The Hacker News
5
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises The Hacker News
6
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key The Hacker News
7
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape The Hacker News
8
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers BleepingComputer
9
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw BleepingComputer