CVE-2024-7358

HIGH 7.8CVE-2024-7358 · Published 01/08/2024 · updated 05/11/2026

In short

CVE-2024-7358 is a HIGH (CVSS 7.8) vulnerability affecting getscreen agent (getscreen).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 22.2% of all vulnerabilities.
Fix: update to 3.9.5 or later.

Package	Affected versions	Patched versions
getscreen agent getscreen	`≥ 3.0.12, < 3.9.5≤ 2.19.6`	`3.9.5`

Description

A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.

References

docs.getscreen.me/change-log/agent/windows · Release Notes
SaumyajeetDas/Vulnerability · Exploit
vuldb.com/cve/CVE-2024-7358 · Third Party Advisory
vuldb.com/submit/374979 · Third Party Advisory
vuldb.com/vuln/273337 · Third Party Advisory
vuldb.com/vuln/273337/cti · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free