try to set the AP to factory default and clear it from the Controller.
Chnage the Controller to controlled upgrade.
Maybe it's trying to do an uodate and it's not possible.
If you change to controlled upgrade it should maybe come with his own code.
Maybe the AP FW code is to old and the upgrade to this version is not possible.
Do you have another AP3605 on cour controller?
Otherwise attache to the console of the AP and look what he is trying.
Serial port for the console
Ask for his version
# cd /etc
# cat ap_version.txt
# cget c g ( config of the AP)
# tail -f /tmp/log/ap.log
Another option would be configure the AP manually.
Telnet/ssh to the AP or over the console port:
Login to AP, type following command:
cset dhcpc disable
cset ipaddr x.x.x.x ( IP Address of the AP)
cset ipmask x.x.x.x
cset authip 1
x.x.x.x #HWC esa port IP
or this it depends on AP Type
set authipaddrs 1 x.x.x.x(You can check this if you ask for the AP config via # cget c g)
If this doesn't help also please open a case with GTAC.
Upgrade when = you as a admin of the system could perform the upgrade/downgrade manually
It comes handy if you upgrade a controller pair and don't want to upgrade all APs at once (always upgrade) instead you could upgrade some APs at a time, wait till they are up and then upgrade some more (=upgrade when).
If the AP is not connected to the controller it's normal that you don't have the same software as the controller.
So fix the connection issue and the AP will connect and upgrade (if always is selected which you should set),
I notice the Inactive AP doesn't have the ip addresses for:
lastAcIp (controllers ip)
failover bmIp 
failover bmIp 
It does have it's correct ip address: These settings are there.
dhcp mode enable (1)
# cset fact
In case that doens't work try to set it static with ... (x.x.x.x = controller IP)
# cset authip 1 x.x.x.x
wait til it's saved and reset the AP