Ruckus SmartZone (SZ) versions before 6.1.2p3 Refresh Build contain a vulnerability that allows authentication bypass when a valid API key is used along with crafted HTTP headers. This flaw enables attackers with limited privileges to gain unauthorized access without user interaction. The vulnerability has a high severity rating with significant impact on confidentiality, integrity, and availability.