We use Rapidfire + network detective where I work, for doing non-intrusive internal scans on all of our clients' networks. Every week; half of the tickets I get for this are port 80/443 vulnerabilities for the web access pages for HP and Cisco switches/routers/iLO interfaces. Some include:
184.108.40.206.4.1.256220.127.116.1115 - Header overflow against HTTP proxy 18.104.22.168.4.1.25622.214.171.12431 - CERN httpd CGI name heap overflow 126.96.36.199.4.1.256188.8.131.5227 - HTTP 1.0 header overflow
The hardware is not out of date, the SSL certs are good. I disable HTTP logins for all devices I can and make sure they are up to date with the latest firmware but these alerts keep coming in for the same devices. I can't find anyone with the same issues online. Are there steps I can take to further secure these or is it safe to just ignore them?