An OS command injection vulnerability exists in the OnCell G3150A-LTE Series devices. This vulnerability occurs when the SMS management functionality is enabled and configured, allowing a remote attacker with required privileges to execute arbitrary commands due to insufficient input validation.