vulnerability
Imported story
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Source: The Hacker News · Published · Last checked 15 hours ago · 1 min read
Read original source ↗ (thehackernews.com)
Publisher excerpt From The Hacker News
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.