Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Summary
Arista Networks has released security updates to address a zero-day vulnerability in their VeloCloud Orchestrator (VCO) On-Prem deployments. This vulnerability has reportedly been exploited in live attacks.
IFF Assessment
A zero-day vulnerability that is actively exploited in the wild represents a significant threat to organizations, allowing attackers to compromise systems before defenses can be deployed.
Severity
This is a critical vulnerability likely allowing remote code execution or significant system compromise. Given it's a zero-day exploited in attacks, it implies high attack vector accessibility and high impact.
Defender Context
This situation requires immediate attention for organizations using Arista's VeloCloud Orchestrator. Defenders should prioritize applying the released patches to mitigate the risk of exploitation. Monitoring network traffic for indicators of compromise related to this vulnerability is also crucial.