I think I remember a procedure for 1100 and 3300 which involved using the 3com serial utility and re-flashing over the serial port.
My old engineer colleagues could do it, I think it was a firmware upgrade at power on could get you in, there was something in the KnowledgeBase about it.