Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock
- Arista's VeloCloud Orchestrator flaw scores a maximum 10.0 severity rating.
- Attackers already exploiting it before a patch was released.
- CISA lists it as actively exploited; admins urged to upgrade now.
Arista has released patches for a maximum-severity vulnerability in its VeloCloud Orchestrator software after confirming attackers were already exploiting it, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to add the flaw to its Known Exploited Vulnerabilities catalogue. The bug affects the on-premises, self-hosted version of the…