Arista patches critical command injection flaw in VeloCloud Orchestrator exploited in attacks