Read-Only to Superuser
Attackers are exploiting a flaw in Arista's VeloCloud Orchestrator that lets anyone who can log in, even read-only, gain the top level of control.
Key terms
AP Cybersecurity alignment
- 2.1.C.5In the lateral-movement phase of an attack, adversaries try to escalate their privileges by accessing computers and user accounts with elevated permissions to services and data.Learning objective: Describe the phases of a cyberattack.
- 4.3.C.2Ensuring that a computer’s operating system and software applications are updated to the most recent version prevents adversaries from taking advantage of a known vulnerability.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
- 5.1.B.4An SQL-injection attack places SQL commands and control characters into a user- input field in an application, which can lead to a breach of confidentiality by causing the application to return more information than it should,…Learning objective: Explain how application attacks exploit vulnerabilities.
AP Networking alignment
- 4.5.B.4Security controls to limit the impact of unauthorized access include: • enforcing strong password policies and account lockout settings • applying the principle of least privilege • implementing segmentation to restrict access…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.
- 4.5.C.3IDS and IPS logs and alerts can be reviewed for indicators of security threats that suggest potential unauthorized access or malicious activity. These can include: • repeated failed login attempts • access attempts outside of…Learning objective: Identify indicators in intrusion detection system (IDS) or intrusion prevention system (IPS) logs that may suggest potential threats or network issues.
- 4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.