Mitigate BIG-IP SSL vulnerability CVE-2017-6168

Hi all, we can't upgrade our F5 at the moment and I have put in the cipher string DEFAULT:!RSA to mitigate this CVE. On ssllabs, it still showing some vulnerabilities and how do i mitigate the following ?