Y2
Public vulnerability disclosure

CVE-2024-7358

Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file

publishedCWE-378CWE-377

A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.

Investigate in Cyber JSONMarkdown
Technical severity8.5 highCVSS 4.0 · CNA: VulDB
Published2024-08-01Source updated 2026-11-02
Collected2026-11-022 attributed sources

Fixes and workarounds

No remediation reported in collected sources.

Missing remediation information is not evidence that no patch exists.

Affected products and versions

ProductVersionsAuthority
Getscreen Agent
Point B Ltd 		2.19.0 (affected)
2.19.1 (affected)
2.19.2 (affected)
2.19.3 (affected)
2.19.4 (affected)
2.19.5 (affected)
2.19.6 (affected)
3.9.0 (affected)
3.9.1 (affected)
3.9.2 (affected)
3.9.3 (affected)
3.9.4 (affected)
3.9.5 (unaffected) 		CNA: VulDB
getscreen
getscreen 		2.19.6 (affected)
Other versions: unknown 		ADP: CISA-ADP

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

Version / scoreVectorAuthority
4.0 / 8.5
high		 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:PCNA: VulDB
3.1 / 7.8
high		 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CCNA: VulDB
3.0 / 7.8
high		 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CCNA: VulDB
2.0 / 6.8
medium		 AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:CCNA: VulDB

Exploit evidence

References