An unauthenticated attacker can reach on-prem VeloCloud Orchestrator over the network and gain privileged access to the host, putting the whole SD-WAN management plane at risk.