CVE-2024-37654 affects BAS-IP devices, potentially exposing sensitive information. A crafted HTTP GET request can be exploited by remote attackers to obtain sensitive data. This vulnerability resides in several BAS-IP models including AV-01D, AV-02D, and others, prior to version 3.9.2. Although the CVSS score is 0, indicating a low base severity, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting some level of risk due to its presence "In The Wild". Successful exploitation could lead to unauthorized access to confidential information stored within or accessible by the affected BAS-IP devices. Organizations using these devices should promptly update to version 3.9.2 or later to mitigate the risk. While not critical, this information disclosure could be a stepping stone for further attacks.