CVE-2009-1429: The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec...

Security readout for executives and security teams

This is a legacy Symantec management-agent vulnerability that could let a remote attacker make affected systems run arbitrary commands. The business risk is highest where old Symantec antivirus or endpoint-management servers remain reachable on internal networks. The provided sources do not show active exploitation or KEV listing. Exposure is most plausible in legacy enterprise environments still running the affected Symantec management, antivirus, quarantine, or endpoint protection versions. Internet exposure is not established in the bundle; internal network reachability is the main concern to verify. Treat as high priority if legacy Symantec infrastructure remains in production, especially on flat internal networks. If the organization no longer runs these products, the priority is confirmation and documentation rather than emergency response. Mitigation focus: Inventory affected Symantec AMS2, SAV, SCS, SEP, and quarantine server deployments.; Upgrade named products to the fixed maintenance releases or later where specified.; Retire or isolate unsupported legacy Symantec management servers..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.