Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. [...]
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
Summary + source link. No paywalls, no tracking.