CVE-2002-0904: Kismet

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.

Affected products

• Kismet Kismet: version 2.2 only; version 2.2.1 only

Published 2002-10-04. Last modified 2026-06-16.