---
id: CVE-2024-7358
title: Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file
summary: >-
  A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4
  on Windows. This affects an unknown function of the file getscreen.msi of the
  component MSI Installer. The manipulation results in creation of temporary
  file …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-378
  - CWE-377
vendor: Point B Ltd
product: Getscreen Agent
affected:
  - getscreen_agent 2.19.0
  - getscreen_agent 2.19.1
  - getscreen_agent 2.19.2
  - getscreen_agent 2.19.3
  - getscreen_agent 2.19.4
  - getscreen_agent 2.19.5
  - getscreen_agent 2.19.6
  - getscreen_agent 3.9.0
  - getscreen_agent 3.9.1
  - getscreen_agent 3.9.2
  - getscreen_agent 3.9.3
  - getscreen_agent 3.9.4
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-08-01T14:35:43.920114Z'
exploitAvailable: true
published: '2024-08-01'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T08:32:28.048Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-7358'
references:
  - url: 'https://vuldb.com/vuln/273337'
    label: >-
      VDB-273337 | Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp
      file
  - url: 'https://vuldb.com/vuln/273337/cti'
    label: 'VDB-273337 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2024-7358'
    label: CVE-2024-7358 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/374979'
    label: >-
      Submit #374979 | POINT B LTD Getscreen Agent  2.19.6 Creation of Temporary
      File in Directory with Insecure Permission
  - url: 'https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen'
  - url: 'https://docs.getscreen.me/change-log/agent/windows/'
tags:
  - cve.org
  - exploit-available
epss: 0.00295
epssPercentile: 0.22244
ingestedAt: '2026-11-05T19:30:42.629Z'
---

## Overview

A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised.

## Affected

- `getscreen_agent 2.19.0`
- `getscreen_agent 2.19.1`
- `getscreen_agent 2.19.2`
- `getscreen_agent 2.19.3`
- `getscreen_agent 2.19.4`
- `getscreen_agent 2.19.5`
- `getscreen_agent 2.19.6`
- `getscreen_agent 3.9.0`
- `getscreen_agent 3.9.1`
- `getscreen_agent 3.9.2`
- `getscreen_agent 3.9.3`
- `getscreen_agent 3.9.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.