CVE-2006-3896
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX...
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
Exploit likelihood
What each source reports
NVD Score used
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
- Record
CVE-2006-3896- CVSS 2.0
- 4.9 Medium
AV:A/AC:M/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
- Record
CVE-2006-3896- Updated
- 2026-11-02
EUVDEUVD-2006-3890 No score
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
- Record
EUVD-2006-3890- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c265-wm96-r7cw No score
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX...
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
- Record
GHSA-c265-wm96-r7cw- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3896 is a medium vulnerability (CVSS 4.9) in Neoscale Systems Cryptostor Tape 700, published December 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. No source names a fixed version.