Several password authentication schemes utilizing smart cards have been proposed in the literature. Recently Kumar et al. proposed a new authentication scheme to access remote server over insecure channels. They also claimed that their scheme is able to resist various attacks. However, in this paper we demonstrate that Kumar et al. scheme is still vulnerable to various malicious attacks and is aslo unable to provide several essential security properties. © Springer Nature Singapore Pte Ltd. 2017.