#arista
-
CISA Adds Actively Exploited Flaws in Collabora Online and Arista VeloCloud to KEV
The U.S. cybersecurity agency CISA has added two critical vulnerabilities, both already seen in real-world attacks, to its Known Exploited Vulnerabilities catalog.
-
Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day
Arista has shipped fixes for on-premises VeloCloud Orchestrator: a critical SQL injection flaw is already being exploited and lets authenticated users escalate to superuser privileges.
-
Maxed-Out VeloCloud Orchestrator Flaw Already Under Active Attack
Arista warns that a new flaw in on-premises VeloCloud Orchestrator is being actively exploited. Only orchestrators that authenticate their Edge devices with certificates are at risk.
-
Arista Patches Critical VeloCloud Orchestrator Zero-Day Already Exploited in Attacks
The flaw, rated a maximum 10.0, allows unauthenticated command execution on the SD-WAN management server. CISA has added it to its Known Exploited Vulnerabilities catalog.