{"api_version":"1","generated_at":"2026-11-02T10:54:39+00:00","cve":"CVE-2024-7358","urls":{"html":"https://cve.report/CVE-2024-7358","api":"https://cve.report/api/cve/CVE-2024-7358.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2024-7358","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-7358"},"summary":{"title":"Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file","description":"A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.","state":"PUBLISHED","assigner":"VulDB","published_at":"2024-08-01 14:15:03","updated_at":"2026-11-02 09:17:35"},"problem_types":["CWE-377","CWE-378","CWE-378 Creation of Temporary File With Insecure Permissions","CWE-377 Insecure Temporary File"],"metrics":[{"version":"4.0","source":"cna@vuldb.com","type":"Secondary","score":"7.1","severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"DECLARED","score":"8.5","severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","data":{"baseScore":8.5,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"version":"3.1","source":"cna@vuldb.com","type":"Secondary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","data":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","version":"3.1"}},{"version":"3.0","source":"CNA","type":"DECLARED","score":"7.8","severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","data":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","version":"3.0"}},{"version":"2.0","source":"cna@vuldb.com","type":"Secondary","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}},{"version":"2.0","source":"CNA","type":"DECLARED","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C","data":{"baseScore":6.8,"vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C","version":"2.0"}}],"references":[{"url":"https://vuldb.com/vuln/273337/cti","name":"https://vuldb.com/vuln/273337/cti","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://docs.getscreen.me/change-log/agent/windows/","name":"https://docs.getscreen.me/change-log/agent/windows/","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/vuln/273337","name":"https://vuldb.com/vuln/273337","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen","name":"https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/cve/CVE-2024-7358","name":"https://vuldb.com/cve/CVE-2024-7358","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/submit/374979","name":"https://vuldb.com/submit/374979","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7358","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7358","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.0","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.1","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.2","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.3","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.4","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.5","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 2.19.6","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 3.9.0","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 3.9.1","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 3.9.2","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 3.9.3","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"affected 3.9.4","platforms":[]},{"source":"CNA","vendor":"Point B Ltd","product":"Getscreen Agent","version":"unaffected 3.9.5","platforms":[]},{"source":"ADP","vendor":"getscreen","product":"getscreen","version":"affected 2.19.6","platforms":[]}],"timeline":[{"source":"CNA","time":"2024-08-01T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"source":"CNA","time":"2024-08-01T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"source":"CNA","time":"2026-10-20T00:00:00.000Z","lang":"en","value":"Countermeasure disclosed"},{"source":"CNA","time":"2026-11-02T09:37:00.000Z","lang":"en","value":"VulDB entry last update"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"saumyajeetdas (VulDB User)","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:getscreen:getscreen:2.19.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"getscreen","vendor":"getscreen","versions":[{"status":"affected","version":"2.19.6"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-7358","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-01T14:35:43.920114Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2024-08-01T14:45:12.374Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:point_b_ltd:getscreen_agent:*:*:*:*:*:*:*:*"],"modules":["MSI Installer"],"product":"Getscreen Agent","vendor":"Point B Ltd","versions":[{"status":"affected","version":"2.19.0"},{"status":"affected","version":"2.19.1"},{"status":"affected","version":"2.19.2"},{"status":"affected","version":"2.19.3"},{"status":"affected","version":"2.19.4"},{"status":"affected","version":"2.19.5"},{"status":"affected","version":"2.19.6"},{"status":"affected","version":"3.9.0"},{"status":"affected","version":"3.9.1"},{"status":"affected","version":"3.9.2"},{"status":"affected","version":"3.9.3"},{"status":"affected","version":"3.9.4"},{"status":"unaffected","version":"3.9.5"}]}],"credits":[{"lang":"en","type":"reporter","value":"saumyajeetdas (VulDB User)"}],"descriptions":[{"lang":"en","value":"A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised."}],"metrics":[{"cvssV4_0":{"baseScore":8.5,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"cvssV3_1":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","version":"3.1"}},{"cvssV3_0":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","version":"3.0"}},{"cvssV2_0":{"baseScore":6.8,"vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-378","description":"Creation of Temporary File With Insecure Permissions","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-377","description":"Insecure Temporary File","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-02T08:32:28.048Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-273337 | Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file","tags":["vdb-entry"],"url":"https://vuldb.com/vuln/273337"},{"name":"VDB-273337 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/273337/cti"},{"name":"CVE-2024-7358 | CVE Analysis and Report","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2024-7358"},{"name":"Submit #374979 | POINT B LTD Getscreen Agent  2.19.6 Creation of Temporary File in Directory with Insecure Permission","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/374979"},{"tags":["exploit"],"url":"https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen"},{"tags":["patch"],"url":"https://docs.getscreen.me/change-log/agent/windows/"}],"timeline":[{"lang":"en","time":"2024-08-01T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2024-08-01T02:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2026-10-20T00:00:00.000Z","value":"Countermeasure disclosed"},{"lang":"en","time":"2026-11-02T09:37:00.000Z","value":"VulDB entry last update"}],"title":"Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file","x_generator":["VulDB PVTS v202611"]}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2024-7358","datePublished":"2024-08-01T13:31:05.739Z","dateReserved":"2024-08-01T07:22:20.570Z","dateUpdated":"2026-11-02T08:32:28.048Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2024-08-01 14:15:03","lastModifiedDate":"2026-11-02 09:17:35","problem_types":["CWE-377","CWE-378","CWE-378 Creation of Temporary File With Insecure Permissions","CWE-377 Insecure Temporary File"],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-01T14:35:43.920114Z","id":"CVE-2024-7358","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2024","CveId":"7358","Ordinal":"1","Title":"Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp fil","CVE":"CVE-2024-7358","Year":"2024"},"notes":[{"CveYear":"2024","CveId":"7358","Ordinal":"1","NoteData":"A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.","Type":"Description","Title":"Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp fil"}]}}}