High severity7.4NVD Advisory· Published May 23, 2016· Updated Jun 17, 2026

CVE-2016-3664

Description

Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to spoof this server and obtain sensitive information via a crafted certificate.

Affected products

Trend Micro/Mobile Security
cpe:2.3:a:trend_micro:mobile_security:*:*:*:*:*:iphone_os:*:*
Range: <=3.1
Trend Micro/Mobile Security for iOSllm-create
Range: <3.2.1188

Patches

Vulnerability mechanics

References

esupport.trendmicro.com/en-us/home/pages/technical-support/1114151.aspxnvdVendor Advisory
packetstormsecurity.com/files/137020/Trend-Micro-Mobile-Security-Man-In-The-Middle.htmlnvd
www.info-sec.ca/advisories/Trend-Micro-Mobile-Security.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000