Arista Warns of Critical VeloCloud SQL Injection ZeroDay Exploited in Attacks

Attackers are exploiting a zeroday SQL injection flaw in Aristas VeloCloud Orchestrator VCO the central management system for VeloCloud SDWAN networks the company said in an advisory on October 22 The flaw lets anyone who can log in to the orchestrator even with a readonly customer account gain operator privileges the top level of control over it For