A company hires a third-party firm to conduct an assessment of
vulnerabilities exposed to the Internet. The firm informs the
company that an exploit exists for an FTP server that had a version
installed from eight years ago. The company has decided to keep the
system online anyway, as no upgrade exists form the vendor. Which
of the following BEST describes the reason why the vulnerability
exists?