Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Arista has issued a warning about a critical zero-day SQL injection vulnerability in its VeloCloud Orchestrator. The vulnerability is being exploited in attacks, and it allows an attacker with any level of login access, including read-only customer accounts, to gain operator privileges. This level of access provides the highest level of control over the system. The VeloCloud Orchestrator is a central management system for VeloCloud SD-WAN networks. Arista released an advisory about the issue on October 22. The vulnerability can be exploited by anyone who can log in to the orchestrator.