Attackers exploit third VeloCloud Orchestrator zero-day in four months
Summary
Attackers have taken advantage of a zero-day vulnerability in VeloCloud Orchestrator, marking the third such exploitation of the platform within four months. This vulnerability is significant as VeloCloud Orchestrator serves as the centralized management system for enterprise SD-WAN deployments, making it a critical target for cyber threats.
Analysis
VeloCloud: VeloCloud develops and provides cloud-delivered software-defined wide area networking solutions that help enterprises optimize connectivity, performance, and security across distributed locations. Its Orchestrator platform serves as the central management console for deploying and overseeing these SD-WAN networks. The company is currently facing repeated security incidents involving zero-day vulnerabilities in its Orchestrator component. Security Incident: Attackers have exploited a zero-day vulnerability in VeloCloud Orchestrator as part of a recent pattern targeting the platform. Networking Product: VeloCloud Orchestrator functions as the centralized management system for enterprise SD-WAN deployments.
Categories
tech