SignalPost

← Stories

Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day

Arista Networks released security updates for an actively exploited SQL injection zero-day in its VeloCloud Orchestrator (VCO) that lets users with read-only accounts gain operator privileges.

2newsrooms
2articles
2 hoursrunning
Oct 22first seen

Ask Scout

Scout answers questions about this story using only the coverage below.

Coverage over time

Oct 22 10 AM: 1 articleOct 22 11 AM: 1 articleOct 22 10 AMOct 22 12 PMpeak 1 per hour

Articles

Oct 22, 12:05 PM thehackernews.com Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Oct 22, 10:18 AM bleepingcomputer.com Arista patches new VeloCloud Orchestrator zero-day exploited in attacks