NetApp OnCommand Balance before 4.2P2 contains a “default privileged account,” which allows remote attackers to gain privileges via unspecified vectors.