ARISTA PATCHES CRITICAL VELOCLOUD ZERO-DAY

The flaw affects on-premises VeloCloud Orchestrator deployments. Command injection vulnerabilities allow attackers to execute arbitrary commands on affected systems, potentially granting full control of the network infrastructure. VeloCloud Orchestrator is used to manage SD-WAN deployments across enterprise networks. The vulnerability's active exploitation indicates attackers are actively targeting organizations using on-premises versions of the platform. Arista has not disclosed specific technical details about the vulnerability or attack methods in early disclosures. Organizations running VeloCloud Orchestrator should prioritize applying the patch to affected systems. This marks another critical vulnerability in widely-deployed networking infrastructure, following similar high-severity issues in other SD-WAN and network management platforms.