Posts tagged: Arista

Any authenticated user on an on-prem VeloCloud Orchestrator can use SQL injection to escalate to a local superuser operator account, exposing internal functions never meant to be reachable remotely, and it’s already being exploited.

An unauthenticated attacker can reach on-prem VeloCloud Orchestrator over the network and gain privileged access to the host, putting the whole SD-WAN management plane at risk.