You should evaluate if there are any actual risks from the described vulnerability. "Could be" doesn't mean anyone has, or ever will create an exploit. See how far are you willing to go to protect against the tiniest possibility. Upgrade doesn't seem so expensive if you think this is important.ok only 6.x gets an security update. so switch services are vulnerable? I need this to compare the the security impact against the time and money the update from 5.x costs.