Enomaly ECP versions up to and including 3.0.4 are believed to contain an insecure silent update mechanism that could allow a remote attacker to execute arbitrary code as root, and to inject or modify VM workloads for execution within user environment or to replay older, insecure workloads. Both the Enomaly ECP implementation and the VMcasting protocol itself are believed to be vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/86356/enomalyecp-exec.txt
Source: https://packetstormsecurity.com/files/86356/Enomaly-ECP-3.0.4-Insecure-Silent-Update-Mechanism.html