Velocloud Security Vulnerability Event

Update - All systems are operating normally. We are continuing to monitor for any issues.

Arista has issued Security Advisory 0144. TPx VeloCloud Orchestrators are not running a vulnerable software version. However, as an added security precaution, Arista has initiated password resets for VeloCloud Orchestrator users and is invalidating existing API tokens.

Users will need to set a new password before signing in. To reset your password securely, select Forgot Password on the VeloCloud Orchestrator login page. You may also receive an email from no-reply@velocloud.net containing a password-reset link.

Customers who use API tokens will need to generate new tokens and update any applications or integrations that rely on them. New passwords should follow your organization’s security standards.

For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.

We are continuing to monitor for any further issues.

Arista/Velocloud has issued Security Advisory 0144 for a security issue that could affect some Orchestrators. They are in the process of resetting certain certificate authorities to mitigate the security vulnerability.

TPx VeloCloud Orchestrators are not running an Arista/Velocloud vulnerable software version.

However, out of an abundance of caution, we recommend that all VeloCloud Orchestrator users reset their passwords and API tokens within the next 48 hours. New passwords should follow your organization’s security standards.

For any assistance resetting your password or tokens, please submit a support request through www.tpx.com/support.