Trend Micro Security 2019 v15 SSL Certificate Validator Update certificate validation

Summaryinfo

A vulnerability has been found in Trend Micro Security 2019 v15 and classified as critical. Impacted is an unknown function of the component SSL Certificate Validator. This manipulation as part of Update causes certificate validation. This vulnerability is registered as CVE-2020-24560. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability has been found in Trend Micro Security 2019 v15 and classified as critical. Affected by this vulnerability is an unknown part of the component SSL Certificate Validator. The manipulation as part of a Update leads to a certificate validation vulnerability. The CWE definition for the vulnerability is CWE-295. The product does not validate, or incorrectly validates, a certificate. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-295: Improper server certificate verification in the communication with the update server.

The weakness was published 09/24/2020 (Website). It is possible to read the advisory at helpcenter.trendmicro.com. This vulnerability is known as CVE-2020-24560 since 08/20/2020. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 09/24/2020). The attack technique deployed by this issue is T1587.003 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entry is available at VDB-161814. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Trend Micro

Name

• Security 2019

Version

• v15

License

• commercial

Website

• Vendor: https://www.trendmicro.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion