A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.
CVE-2024-7358
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-377, CWE-378
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
getscreen getscreen agent
References
- docs.getscreen.me Release Notes
- github.com Exploit
- vuldb.com Third Party Advisory, VDB Entry
- vuldb.com Third Party Advisory, VDB Entry
- vuldb.com Third Party Advisory, VDB Entry
- vuldb.com Permissions Required, VDB Entry