Search
Find a vulnerability
Search criteria
1 vulnerability by Point B Ltd
CVE-2024-7358 (GCVE-0-2024-7358)
Vulnerability from cvelistv5 – Published: 2024-08-01 13:31 – Updated: 2026-11-02 08:32
VLAI
EPSS
VEX
Title
Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file
Summary
A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-01 14:35 UTC
CWE
Assigner
VulDB
CNA
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/273337 | vdb-entry |
| https://vuldb.com/vuln/273337/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2024-7358 | third-party-advisory |
| https://vuldb.com/submit/374979 | third-party-advisory |
| https://github.com/SaumyajeetDas/Vulnerability/tr… | exploit |
| https://docs.getscreen.me/change-log/agent/windows/ | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Point B Ltd | Getscreen Agent |
Affected:
2.19.0
Affected: 2.19.1 Affected: 2.19.2 Affected: 2.19.3 Affected: 2.19.4 Affected: 2.19.5 Affected: 2.19.6 Affected: 3.9.0 Affected: 3.9.1 Affected: 3.9.2 Affected: 3.9.3 Affected: 3.9.4 Unaffected: 3.9.5 cpe:2.3:a:point_b_ltd:getscreen_agent:*:*:*:*:*:*:*:* |
|
| getscreen | getscreen |
Affected:
2.19.6
cpe:2.3:a:getscreen:getscreen:2.19.6:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:getscreen:getscreen:2.19.6:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "getscreen",
"vendor": "getscreen",
"versions": [
{
"status": "affected",
"version": "2.19.6"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-7358",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-01T14:35:43.920114Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-01T14:45:12.374Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:point_b_ltd:getscreen_agent:*:*:*:*:*:*:*:*"
],
"modules": [
"MSI Installer"
],
"product": "Getscreen Agent",
"vendor": "Point B Ltd",
"versions": [
{
"status": "affected",
"version": "2.19.0"
},
{
"status": "affected",
"version": "2.19.1"
},
{
"status": "affected",
"version": "2.19.2"
},
{
"status": "affected",
"version": "2.19.3"
},
{
"status": "affected",
"version": "2.19.4"
},
{
"status": "affected",
"version": "2.19.5"
},
{
"status": "affected",
"version": "2.19.6"
},
{
"status": "affected",
"version": "3.9.0"
},
{
"status": "affected",
"version": "3.9.1"
},
{
"status": "affected",
"version": "3.9.2"
},
{
"status": "affected",
"version": "3.9.3"
},
{
"status": "affected",
"version": "3.9.4"
},
{
"status": "unaffected",
"version": "3.9.5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "saumyajeetdas (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-378",
"description": "Creation of Temporary File With Insecure Permissions",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-377",
"description": "Insecure Temporary File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T08:32:28.048Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-273337 | Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/273337"
},
{
"name": "VDB-273337 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/273337/cti"
},
{
"name": "CVE-2024-7358 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2024-7358"
},
{
"name": "Submit #374979 | POINT B LTD Getscreen Agent 2.19.6 Creation of Temporary File in Directory with Insecure Permission",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/374979"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen"
},
{
"tags": [
"patch"
],
"url": "https://docs.getscreen.me/change-log/agent/windows/"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-08-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-08-01T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-20T00:00:00.000Z",
"value": "Countermeasure disclosed"
},
{
"lang": "en",
"time": "2026-11-02T09:37:00.000Z",
"value": "VulDB entry last update"
}
],
"title": "Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-7358",
"datePublished": "2024-08-01T13:31:05.739Z",
"dateReserved": "2024-08-01T07:22:20.570Z",
"dateUpdated": "2026-11-02T08:32:28.048Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}