High severity7.5NVD Advisory· Published Sep 24, 2020· Updated Jun 17, 2026

CVE-2020-15604

Description

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Securityllm-fuzzy
Range: v15
Trend Micro/Trend Micro Security (Consumer) 2020cpe-rescue
Range: 2019 (v15)

Patches

Vulnerability mechanics

References

helpcenter.trendmicro.com/en-us/article/TMKA-09890nvdVendor Advisory
helpcenter.trendmicro.com/ja-jp/article/TMKA-09673nvdVendor Advisory
jvn.jp/en/jp/JVN60093979/nvdThird Party Advisory
jvn.jp/jp/JVN60093979/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000