The executables 'redirect.exe' and/or 'changepw.exe' exist on this webserver. Some versions of these files are vulnerable to remote exploit. An attacker can use this hole to gain access to confidential data or escalate their privileges on the web server. *** As OVS solely relied on the existence of the redirect.exe or changepw.exe files, *** this might be a false positive

remove them from cgi-bin or scripts folder.