High severity7.5NVD Advisory· Published Sep 24, 2020· Updated Jun 17, 2026
CVE-2020-24560
CVE-2020-24560
Description
An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-295: Improper server certificate verification in the communication with the update server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: v15
- Range: 2019 (v15)
Patches
Vulnerability mechanics
References
4- helpcenter.trendmicro.com/en-us/article/TMKA-09890nvdVendor Advisory
- helpcenter.trendmicro.com/ja-jp/article/TMKA-09673nvdVendor Advisory
- jvn.jp/en/jp/JVN60093979/nvdThird Party Advisory
- jvn.jp/jp/JVN60093979/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.