An OS command injection vulnerability exists in the management GUI (maintenance utility) of Hitachi Virtual Storage Platform One Block models 23, 24, 26, and 28. This vulnerability allows an unauthenticated attacker to execute arbitrary OS commands remotely. The affected versions are those before DKCMAIN A3-04-21-40/00 and ESM A3-04-21/00. The vulnerability has a high severity with a CVSS score of 8.1.