CVE-2024-7358
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
39/100
Published: 2024-08-01
Modified: 2026-11-05
First seen: 2026-11-02
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.
Weakness Classification (2)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Point B Ltd | Getscreen Agent | 2.19.0 |
| Point B Ltd | Getscreen Agent | 2.19.1 |
| Point B Ltd | Getscreen Agent | 2.19.2 |
| Point B Ltd | Getscreen Agent | 2.19.3 |
| Point B Ltd | Getscreen Agent | 2.19.4 |
| Point B Ltd | Getscreen Agent | 2.19.5 |
| Point B Ltd | Getscreen Agent | 2.19.6 |
| Point B Ltd | Getscreen Agent | 3.9.0 |
| Point B Ltd | Getscreen Agent | 3.9.1 |
| Point B Ltd | Getscreen Agent | 3.9.2 |
| Point B Ltd | Getscreen Agent | 3.9.3 |
| Point B Ltd | Getscreen Agent | 3.9.4 |
| getscreen | getscreen_agent | < 2.19.6 |
References & Advisories (6)
vdb-entry
third-party-advisory
third-party-advisory
signature
permissions-required
patch
exploit