Ciena Navigator NCS, MCP, and Planner Plus OnPrem contain hidden system accounts with default passwords that can be exploited for unauthorized access.

The vulnerability (CWE-1393) involves the presence of hidden system accounts with predictable default passwords. An attacker can leverage these accounts to gain initial access and subsequently escalate privileges within the affected Ciena product suite.

The CVSS score of 9.8 reflects the high risk posed by this vulnerability. Unauthorized access to network control suites allows attackers to potentially manipulate network traffic, gain internal system control, and disrupt critical infrastructure operations.

Immediate Action: Apply the vendor-provided patches: Navigator NCS (8.1-P02, 8.2 or later), MCP (7.2-P07, 8.0-P04 or later), or Planner Plus OnPrem (4.1-P01, 4.2 or later).

Proactive Monitoring: Audit system account activity and search for any logins associated with default or undocumented service accounts.

Compensating Controls: Restrict network access to management interfaces to authorized IP addresses only and disable any unnecessary service accounts if possible.

Public Exploit Available: No

This vulnerability requires immediate attention to prevent unauthorized access via legacy or hidden administrative accounts. Organizations should coordinate with Ciena support to apply the recommended patches for the specific versions identified.