We use Rapidfire + network detective where I work, for doing non-intrusive internal scans on all of our clients' networks. Every week; half of the tickets I get for this are port 80/443 vulnerabilities for the web access pages for HP and Cisco switches/routers/iLO interfaces. Some include:
126.96.36.199.4.1.256188.8.131.5215 - Header overflow against HTTP proxy 184.108.40.206.4.1.256220.127.116.1131 - CERN httpd CGI name heap overflow 18.104.22.168.4.1.25622.214.171.12427 - HTTP 1.0 header overflow
The hardware is not out of date, the SSL certs are good. I disable HTTP logins for all devices I can and make sure they are up to date with the latest firmware but these alerts keep coming in for the same devices. I can't find anyone with the same issues online. Are there steps I can take to further secure these or is it safe to just ignore them?