The same firmware, with the same UUID can exist across many products and orgs. Typical for a dev product or similar. When that happens this query will fail. Currently Devices.get_delta_or_firmware_url will hit it if deltas are enabled.