false positive (high/firm) for IIS (7.5)

[drwetter]

Hello,

I doubt this is a valid finding (high, firm) as it looks to me the server banner was just taken and a lookup was performed:

For this the IIS from 2008R2 shouldn't have been patched. One cannot tell from the outside -- at least not by looking at this banner.

Can this be either taken out or at least changed to info/firm, then at least not supplying the CVEs?

Thx, Dirk