CVE-2006-3896

CVE-2006-3896 affects NeoScale Systems CryptoStor 700 series appliances prior to firmware 2.6. The vulnerability stems from client-side ActiveX-based smartcard authentication; disabling ActiveX bypasses the second-factor, allowing an attacker with valid username/password to gain admin access. Imp...