CVE-2024-7358
Full vulnerability record from the local CVENow database.
Description
A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.
Severity
HIGH
CVSS score
7.1
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2024-08-01 14:15:03.820000
Last modified
2026-11-02 09:17:35.040000
View original CVE JSON
{
"id": "CVE-2024-7358",
"sourceIdentifier": "[email protected]",
"published": "2024-08-01T14:15:03.820",
"lastModified": "2026-11-02T09:17:35.040",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised."
},
{
"lang": "es",
"value": "Se encontró una vulnerabilidad en Point B Ltd Getscreen Agent 2.19.6 en Windows. Ha sido declarada crítica. Una función desconocida del archivo getscreen.msi del componente Installation es afectada por esta vulnerabilidad. La manipulación conduce a la creación de un archivo temporal con permisos inseguros. Se requiere acceso local para abordar este ataque. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-273337. NOTA: Se contactó al proveedor tempranamente sobre esta divulgación, pero no pudo brindar una respuesta técnica a tiempo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Point B Ltd",
"product": "Getscreen Agent",
"cpes": [
"cpe:2.3:a:point_b_ltd:getscreen_agent:*:*:*:*:*:*:*:*"
],
"modules": [
"MSI Installer"
],
"versions": [
{
"version": "2.19.0",
"status": "affected"
},
{
"version": "2.19.1",
"status": "affected"
},
{
"version": "2.19.2",
"status": "affected"
},
{
"version": "2.19.3",
"status": "affected"
},
{
"version": "2.19.4",
"status": "affected"
},
{
"version": "2.19.5",
"status": "affected"
},
{
"version": "2.19.6",
"status": "affected"
},
{
"version": "3.9.0",
"status": "affected"
},
{
"version": "3.9.1",
"status": "affected"
},
{
"version": "3.9.2",
"status": "affected"
},
{
"version": "3.9.3",
"status": "affected"
},
{
"version": "3.9.4",
"status": "affected"
},
{
"version": "3.9.5",
"status": "unaffected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "getscreen",
"product": "getscreen",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:a:getscreen:getscreen:2.19.6:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2.19.6",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"baseScore": 6.8,
"accessVector": "LOCAL",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 3.1,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-08-01T14:35:43.920114Z",
"id": "CVE-2024-7358",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-377"
},
{
"lang": "en",
"value": "CWE-378"
}
]
}
],
"references": [
{
"url": "https://docs.getscreen.me/change-log/agent/windows/",
"source": "[email protected]"
},
{
"url": "https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2024-7358",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/374979",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/273337",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/273337/cti",
"source": "[email protected]"
}
]
}