We use Rapidfire + network detective where I work, for doing non-intrusive internal scans on all of our clients' networks. Every week; half of the tickets I get for this are port 80/443 vulnerabilities for the web access pages for HP and Cisco switches/routers/iLO interfaces. Some include:
220.127.116.11.4.1.25618.104.22.16815 - Header overflow against HTTP proxy 22.214.171.124.4.1.256126.96.36.19931 - CERN httpd CGI name heap overflow 188.8.131.52.4.1.256184.108.40.20627 - HTTP 1.0 header overflow
The hardware is not out of date, the SSL certs are good. I disable HTTP logins for all devices I can and make sure they are up to date with the latest firmware but these alerts keep coming in for the same devices. I can't find anyone with the same issues online. Are there steps I can take to further secure these or is it safe to just ignore them?