# CVE-2024-7358: Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file

Status: published. Published: 2024-08-01. Updated: 2026-11-02.

A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- Point B Ltd / Getscreen Agent: 2.19.0 (affected); 2.19.1 (affected); 2.19.2 (affected); 2.19.3 (affected); 2.19.4 (affected); 2.19.5 (affected); 2.19.6 (affected); 3.9.0 (affected); 3.9.1 (affected); 3.9.2 (affected); 3.9.3 (affected); 3.9.4 (affected); 3.9.5 (unaffected). Source: CNA: VulDB
- getscreen / getscreen: 2.19.6 (affected). Source: ADP: CISA-ADP

## Severity and prioritization

- CVSS 4.0: 8.5 (high); CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P; source: CNA: VulDB

- CVSS 3.1: 7.8 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C; source: CNA: VulDB

- CVSS 3.0: 7.8 (high); CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C; source: CNA: VulDB

- CVSS 2.0: 6.8 (medium); AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C; source: CNA: VulDB

- CVSS 4.0: 7.1 (high); CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X; source: NVD: cna@vuldb.com

- CVSS 3.1: 7.8 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; source: NVD: cna@vuldb.com

- CVSS 2.0: 6.8 (medium); AV:L/AC:L/Au:S/C:C/I:C/A:C; source: NVD: cna@vuldb.com

- CISA KEV: No listing in collected sources

- EPSS: 0.23% as of 2026-11-01; percentile 13.57%

- SSVC: exploitation poc; automatable no; technical impact total; source ADP: CISA-ADP

- Weaknesses: CWE-378, CWE-377

## Exploit evidence

- exploit: https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen (CNA: VulDB)

## References

- https://vuldb.com/vuln/273337 (CNA: VulDB; vdb-entry)

- https://vuldb.com/vuln/273337/cti (CNA: VulDB; signature, permissions-required)

- https://vuldb.com/cve/CVE-2024-7358 (CNA: VulDB; third-party-advisory)

- https://vuldb.com/submit/374979 (CNA: VulDB; third-party-advisory)

- https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen (CNA: VulDB; exploit)

- https://docs.getscreen.me/change-log/agent/windows/ (CNA: VulDB; patch)

- https://docs.getscreen.me/change-log/agent/windows/ (cna@vuldb.com)

- https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen (cna@vuldb.com)

- https://vuldb.com/cve/CVE-2024-7358 (cna@vuldb.com)

- https://vuldb.com/submit/374979 (cna@vuldb.com)

- https://vuldb.com/vuln/273337 (cna@vuldb.com)

- https://vuldb.com/vuln/273337/cti (cna@vuldb.com)

## Provenance

- CNA: VulDB: https://www.cve.org/CVERecord?id=CVE-2024-7358; retrieved 2026-11-02; source updated 2026-11-02

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-7358; retrieved 2026-11-02; source updated 2026-11-02

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2024-7358; retrieved 2026-11-02; source updated Not reported

Revision: 9f9eba49f98351cd0378e44618e543d93a288a32e3f38e2c0c24f5b154efb095

Canonical: https://y2.dev/cve/CVE-2024-7358