ECS versions prior to 3.1 contain an undocumented account (emcservice) that is protected with a default password. This user account is intended for use by customer support representatives to troubleshoot ECS configuration issues. A remote malicious user with the knowledge of the default password could potentially login to compromise the affected system.
25337f0cf2611f718c36d835f6039844f57b35756a5bcdf2fb0cbd23997d38db