It's possible to obtain access to smart card data without entering PIN.
vulners.com/securityvulns/securityvulns:doc:21626