NIST recommendation
Default administrative, or root passwords should be changed to prevent wiretapping of conversations on the network with port mirroring or bridging. If possible, remote access to the graphical user interface should be disabled to prevent the interception of plaintext administration sessions. When possible, a direct USB connection to the administrative interface is recommended. Also, consider disabling port mirroring on the switch.
How Messaging addresses the vulnerability
Messaging enforces default password change at the time of Messaging server installation. A super-user login must be administered before the installation can be completed.
You cannot disable the Graphical User Interface (GUI) on Messaging because key functions are available only through the GUI.