Arista has issued a patch for an actively exploited VeloCloud vulnerability that scores a perfect 10 on the CVSS scale. The bug allows unauthenticated command injection and may expose managed Edge devices.
Arista has released a patch for a VeloCloud vulnerability that is being actively exploited. The flaw, which scores a perfect 10 on the CVSS severity scale, allows unauthenticated command injection and may expose managed Edge devices.
The US Cybersecurity and Infrastructure Security Agency (CISA) has given administrators a deadline to apply the fix.
Why this matters: The vulnerability is already being exploited in the wild and carries the highest possible severity rating, putting affected systems at immediate risk.
What this means for you: If you manage Arista VeloCloud Edge devices, you should apply the patch immediately to prevent potential compromise.
Join thousands of readers getting the best of British news straight to their inbox.