OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00 CENTUM VP Small R4.01.00 to R4.03.00 CENTUM VP Basic R4.01.00 to R4.03.00 and B/M9000 VP R6.01.01 to R6.03.02 which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.