You'd be surprised, but it often comes to "nobody knows how to build that 10 year old piece of firmware anymore".
This. That's why I prefer to buy devices that have known compatibility with OpenWRT.
> It seemed the vulnerability had been introduced in the latest firmware version. Even though older versions do not have this vulnerability, they do have others (such as this buffer overflow) so you should still update.