Technically, you have to have a Cisco Support License to have any firmware except the one that’s loaded on the phone. Knowing Cisco, that statement might even be too broad - they’re pretty touchy about people redistributing their stuff. Having said that, however, without a license, you can download firmware versions from several sources, just not from Cisco.