Cyber

What changed

Arista Networks has identified an improper input validation vulnerability in the VeloCloud Orchestrator (VCO) that could be exploited by remote attackers. This vulnerability may lead to unauthorized access to privileged internal functionalities, potentially compromising the orchestrator and the data it manages.

The issue affects on-premises versions of VCO, including hosted and dedicated deployments, but has been addressed with patches from the vendor.

Who is affected

Organizations utilizing Arista's VeloCloud Orchestrator are at risk due to this vulnerability. The following groups should pay particular attention:

Users of the on-premises version of VeloCloud Orchestrator need to ensure they apply the latest security patches.

• Arista Networks customers using VeloCloud Orchestrator.
• Enterprises relying on VCO for network orchestration.
• Organizations with dedicated or hosted VCO deployments.

What to do

It is crucial for affected users to take immediate action to mitigate potential risks associated with this vulnerability. Ensure that all relevant patches are applied to the VeloCloud Orchestrator.

Regularly review security protocols and access controls to safeguard against unauthorized access.

• Apply the latest patches provided by Arista Networks.
• Conduct a security audit of the VCO deployment.
• Monitor for any unusual activity within the orchestrator.

What changed

A vulnerability has been discovered in the API of Cisco Identity Services Engine (ISE) that could enable unauthenticated remote attackers to bypass authentication mechanisms. This issue arises from insufficient authentication controls on a specific API endpoint, which can be exploited through crafted requests.

• The vulnerability allows unauthorized access to the affected device.
• Exploitation could lead to a complete bypass of the web-based management interface.
• This issue highlights the importance of robust authentication controls in API design.

Who is affected

Organizations utilizing Cisco Identity Services Engine are at risk due to this vulnerability. The following groups are particularly affected:

• Enterprises leveraging Cisco ISE for network access control.
• Organizations that rely on Cisco for identity management solutions.
• IT departments managing Cisco infrastructure and security protocols.

What to do

Immediate action is recommended to mitigate the risks associated with this vulnerability. Organizations should prioritize the following steps:

• Review and update Cisco Identity Services Engine to the latest version that addresses this vulnerability.
• Implement additional security measures to monitor API access and detect unauthorized attempts.
• Conduct a thorough audit of API endpoints to ensure robust authentication controls are in place.