I'm trying to find information on whether or not the F5 servers we are running are vulnerable to the Security Advisory K02566623: Overview of F5 vulnerabilities (March 2021). We are running Big-IP versions 10.2.4, 9.4.8, and 9.4.3. The modules we have active are SSL, LTM, and ASM. I understand that these are EOL for support but are the differences between these and the newer versions so different that we are not exposed to the vulnerabilities?
"When a vulnerability is publicly disclosed, F5 is committed to evaluating the software versions that have not yet reached End of Technical Support (EoTS), as indicated in the software support policy articles for each product. For more information, refer to F5 software products currently supported with active development in K8986: F5 software lifecycle policy.
When critical vulnerabilities are discovered, F5 implements, tests, and releases security hotfixes for the supported software versions, where technically feasible. For additional information regarding the F5 critical issue hotfix policy, refer to K4918: Overview of the F5 critical issue hotfix policy."
