A critical OS command injection vulnerability exists in RUCKUS SmartZone (SZ) versions before 6.1.2p3 Refresh Build. This flaw allows an authenticated user to inject operating system commands via an IP address field. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability.