Vulnerability in Neoscale Systems Cryptostor Tape 700
CVE-2006-3896
The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allows remote attackers to bypass smartcard authentication, and gain access if able to present a valid username and password, by disabling ActiveX.
EPSS: 0.008 (53.1th percentile) — read the EPSS interpretation.
Affected products
- Neoscale_systems Cryptostor_tape_700
- N/a — versions n/a
References
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (vdb-entry, x_refsource_BID)