It does seem that Cisco will provide updates if customers don&#x27;t have a valid SmartNET contract.  From the vulnerability disclosure:<p>&gt; Customers Without Service Contracts
&gt; Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC):
<a href="http:&#x2F;&#x2F;www.cisco.com&#x2F;en&#x2F;US&#x2F;support&#x2F;tsd_cisco_worldwide_contacts.html" rel="nofollow">http:&#x2F;&#x2F;www.cisco.com&#x2F;en&#x2F;US&#x2F;support&#x2F;tsd_cisco_worldwide_conta...</a>
&gt; Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.