ABB — 9 prefixes (MA-S, 36-bit)
Summary
- // what this is
- ABB is registered to MAC prefix
8C1F646D0and 8 more in the IEEE OUI database. When a device's MAC address begins with8C1F646D0, that block was registered by ABB — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- ABB-family building-automation and protection products have a documented CVE history (Cylon Aspect command injection/credential exposure, EIBPORT V3 KNX RCE, Relion protection relay unsigned firmware) affecting adjacent ABB product lines — not confirmed for devices carrying this specific OUI, but relevant context when inventorying ABB network gear.
About this vendor.
A MAC address matching one of ABB's nine 36-bit (MA-S) prefixes, all registered to the plain name "ABB" at Fulachstrasse 150, Schaffhausen CH 8200, Switzerland, belongs to ABB Ltd's Electrification division — most plausibly a networked low-voltage protection device such as a circuit breaker, residual-current device (RCD), or fault-detection relay built at or for that site.
This registration is distinct from six already-published ABB-suffixed vendor entries (ABB Robotics, ABB Power Systems / Power Generation, ABB SACE, ABB Power T&D, ABB Cewe-Control, ABB Global Industries), each of which holds its own separate 24-bit (MA-L) allocation. The bare "ABB" name exists only in the MA-S registry class — no MA-L block is registered to it.
IEEE's public MA-S registry data carries no assignment-date field, so no registration date is published here. Third-party aggregators surfaced dates for these blocks (e.g. "registered 21 Feb 2011"), but those are database artifacts of the aggregator, not IEEE facts, and are deliberately omitted.
ABB's building-automation and low-voltage protection product lines have a documented history of disclosed CVEs (Cylon Aspect command injection, EIBPORT V3 KNX remote code execution, unsigned Relion relay firmware). None is confirmed against a device carrying this specific OUI, but the pattern is relevant background for anyone inventorying ABB gear on a network.
- IEEE assignment
- 9 MA-S (36-bit) blocks → "ABB", registered Schaffhausen, CH [Confirmed] — https://standards-oui.ieee.org/oui36/oui36.csv, corroborated by independent registry-angle pull of a 5-block subset
- Registry / block size
- MA-S (36-bit); no MA-L (24-bit) block registered to the plain "ABB" name — the 6 other ABB entities hold their own separate MA-L allocations [Confirmed] — https://standards-oui.ieee.org/oui36/oui36.csv; this site's own enrichment records
- HQ / country
- Fulachstrasse 150, Schaffhausen CH 8200, Switzerland (registry address; matches ABB's own published Schaffhausen site page) [Confirmed] — https://new.abb.com/ch/en/ueber-uns/standorte/schaffhausen
- Company status
- active — ABB Ltd / ABB Schweiz AG, multinational electrification and automation company [Confirmed] — https://new.abb.com
- Device types
- circuit breakers, residual-current devices (RCDs), fault-detection relays, building-automation controllers (plausible for the registrant site; no source binds a specific OUI to a named SKU) [Likely] — https://new.abb.com/ch/en/ueber-uns/standorte/schaffhausen
- Notable products
- SMISSLINE switches, LEVY switches (named on the registrant's own site page, division-level not OUI-level) [Likely] — https://new.abb.com/ch/en/ueber-uns/standorte/schaffhausen
- Verified sample prefixes (all MA-S, "ABB")
- 8C:1F:64:6D:0/36, 70:B3:D5:C4:7/36, 70:B3:D5:08:0/36, 8C:1F:64:B2:4/36, 8C:1F:64:85:2/36, 8C:1F:64:FB:1/36, 70:B3:D5:89:2/36, 8C:1F:64:71:8/36, 8C:1F:64:32:A/36 [Confirmed] — https://standards-oui.ieee.org/oui36/oui36.csv
- Special note
- Do not attribute the shared IEEE base blocks 70:B3:D5 or 8C:1F:64 to ABB as a whole — they are IEEE-held /24 bases sub-allocated in MA-S /36 slices to many unrelated companies; only the specific 36-bit slices above belong to ABB. [Confirmed] — https://standards-oui.ieee.org/oui36/oui36.csv
- Related vendors
- ABB Robotics, ABB Power Systems / Power Generation, ABB SACE, ABB Power T&D, ABB Cewe-Control, ABB Global Industries (each a separately-registered MA-L vendor entry) [Confirmed] — this site's own enrichment records
- Analyst note
- ABB-family building-automation/protection products carry a documented CVE history (CVE-2023-0636, CVE-2024-6209, CVE-2024-13967, CVE-2024-8036) — family-level context, not confirmed for this specific OUI. [Confirmed at ABB-family level] — https://www.bankinfosecurity.com/abb-smart-building-software-flaws-invite-in-hackers-a-26722, https://cyberpress.org/critical-abb-eibport-vulnerability/, https://www.midnightblue.nl/blog/cve-2024-8036-abb-insecure-updates, https://www.vulncheck.com/blog/exploring-abb-ics-vulns, https://www.securityweek.com/researcher-says-abb-building-control-products-affected-by-1000-vulnerabilities/