Navigator Ncs
Monthly
Unauthenticated information exposure in Ciena Navigator Network Control Suite (NCS) allows remote attackers with network access to subscribe to an event-streaming API and read potentially sensitive data. The flaw (CWE-306 missing authentication) affects numerous NCS releases from 7.2 through 10.0 and their patch levels, with a CVSS 3.1 base score of 7.5 due to high confidentiality impact and no integrity or availability impact. No public exploit identified at time of analysis.
Unauthenticated information exposure in Ciena Navigator Network Control Suite (NCS) allows remote attackers with network access to subscribe to an event-streaming API and read potentially sensitive data. The flaw (CWE-306 missing authentication) affects numerous NCS releases from 7.2 through 10.0 and their patch levels, with a CVSS 3.1 base score of 7.5 due to high confidentiality impact and no integrity or availability impact. No public exploit identified at time of analysis.