Exploitation is arriving before organisations can deploy. Patching in twenty days is worth less than surviving a compromised appliance.
No vendor to patch and no version to check. Every implementation had to fix it separately.