ADF Technologies Sdn Bhd — 24:EC:51 (MA-L)

ADF Technologies Sdn Bhd holds the IEEE MA-L OUI block 24:EC:51, registered to a manufacturing address in the Bayan Lepas Industrial Park, Penang, Malaysia. ADF Technologies is a Malaysian building-automation company, incorporated in 2006 and granted MSC status the same year, that designs and builds IP-networked building management system (BMS) hardware. Their primary networked products are the XTEC-X1 — a BACnet Building Controller (B-BC certified) with a wired Ethernet interface speaking BACnet/IP, BACnet MS/TP, and Modbus TCP/RTU — and the XTEC-UC, a BACnet Application Specific Controller (B-ASC). These Direct Digital Controllers and field devices (including the T1 Smart Thermostat) are deployed in commercial HVAC, chiller plant, pump, and fan-coil applications. The Ethernet-equipped XTEC-X1 is the product most likely to carry MAC addresses drawn from this OUI assignment, so the registration is credible against the company's product line. As operational-technology / BAS equipment, ADF devices inherit the general security profile of BACnet/IP, a protocol designed before networked building systems were internet-exposed and which by default uses unauthenticated, plain-text broadcast messaging. No ADF-specific CVEs, ICS-CERT advisories, or registration date were recoverable in this pass.

IEEE assignment

24:EC:51 → ADF Technologies Sdn Bhd (MA-L, 24-bit OUI) [Confirmed] — the IEEE MA-L registry line 17737 (IEEE 802 OUI / MA-L registry)

Registry / block size

MA-L (full 24-bit OUI). Not present in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S) [Confirmed] — the cached registry snapshots the IEEE MA-L registry / the IEEE MA-M registry / the IEEE MA-S registry cross-check

Registered address

Plot 88F, Lintang Bayan Lepas 10, Bayan Lepas Industrial Park Phase IV, Bayan Lepas, Pulau Pinang, MY 11900 [Confirmed] — IEEE the IEEE MA-L registry (parsed from raw registry field)

HQ / country

Bayan Lepas, Penang, Malaysia (main HQ; branches in Kuala Lumpur, Kuching/Sarawak, Kota Kinabalu/Sabah) [Confirmed] — https://www.adftech.com.my/about-us/

Company status

active; incorporated 2006, MSC status granted same year [Confirmed] — https://www.adftech.com.my/about-us/

Industry

building automation / BMS hardware manufacturer (OT/BAS) [Confirmed] — https://www.adftech.com.my/about-us/

Device types

IP-networked DDC building controllers — XTEC-X1 (BACnet/IP B-BC Building Controller, Ethernet; supports BACnet/IP, BACnet MS/TP, Modbus TCP/RTU), XTEC-UC (BACnet B-ASC Application Specific Controller), T1 Smart Thermostat, ELV field devices [Confirmed] — https://www.adftech.com.my/product/hardware/adf-xtec-universal-programmable-ip-controllerp-controller/ , https://www.adftech.com.my/product/hardware/xtec-uc-universal-programmable-controller/

Website

https://www.adftech.com.my/ [Confirmed] — https://www.adftech.com.my/

Certifications

ISO 9001:2015; MSC Status (Malaysia Digital Economy Corporation); BACnet Testing Laboratories (BTL) certification for the XTEC series [Confirmed] — https://www.adftech.com.my/about-us/

Engineering presence

GitHub org https://github.com/ADFTech — 13 public repos incl. XTEC_X1_Public, XTEC_UC_MSTP_Public, a forked BACnet .NET protocol library, and Grafana visualization forks; confirms in-house embedded firmware for the networked BMS controllers [Confirmed] — https://github.com/ADFTech

Security context

OT/BAS equipment. The XTEC line speaks BACnet/IP, which by default is unauthenticated plain-text broadcast — the general risk class (spoofing, setpoint manipulation, alarm suppression, lateral movement from exposed BAS into IT networks) is documented for BACnet/IP generally, not ADF specifically. No ADF-specific CVEs or ICS-CERT advisories found. [Likely] — https://www.veridify.com/bacnet-secure-connect-bacnet-sc-and-bas-bms-cybersecurity/ , https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-82r2.pdf

OUI registration date

Unknown — IEEE publishes NO assignment/registration date for MAC/OUI prefixes (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address). Any third-party "date registered" is a database artifact, not an IEEE fact. [Unknown]

Analyst note

A globally-administered 24:EC:51 address identifies genuine ADF Technologies BMS hardware (most likely an XTEC-X1 or other Ethernet field controller). Such devices appearing on a corporate network typically indicate building-automation infrastructure; treat BACnet/IP exposure to general IT/internet segments as an OT security concern.