Critical OS Command Injection Vulnerability Discovered in Arista VeloCloud Orchestrator

What changed

The Arista VeloCloud Orchestrator (VCO) has been found to contain a critical OS command injection vulnerability. This flaw allows remote attackers to potentially exploit the orchestrator's internal functionality, which was originally designed for internal use only.

The implications of this vulnerability are severe, as successful exploitation could lead to unauthorized access, compromising the confidentiality, integrity, and availability of both the orchestrator and the data it manages.

Who is affected

Organizations utilizing the Arista VeloCloud Orchestrator, particularly those running the on-premises version, are at risk. The vulnerability has been identified as actively exploited in the wild.

Both hosted and dedicated versions of the VCO have received patches to mitigate this vulnerability prior to this announcement.

• Arista VeloCloud Orchestrator users
• Organizations with on-premises VCO deployments
• Companies relying on VCO for data management
• IT departments managing network orchestration solutions

What to do

It is crucial for affected organizations to apply the latest patches provided by Arista to safeguard their systems against potential exploitation. Regularly updating software and monitoring for unusual activity can help mitigate risks.

Additionally, organizations should review their security policies and access controls to ensure that internal functionalities are not exposed to remote access.

• Apply patches for the VeloCloud Orchestrator immediately
• Conduct a security audit of current deployments
• Enhance monitoring for suspicious activities
• Review and tighten access controls for internal functionalities