AirTies Wireless Networks — 5 prefixes (MA-L)

A MAC address starting with 88:41:FC, F4:17:B8, 00:1C:A8, A0:2D:13, or 18:28:61 belongs to AirTies Wireless Networks, a Turkish networking vendor. Its hardware shows up almost entirely as ISP-provisioned home gear: Wi-Fi mesh extenders, DSL/gateway modems, and set-top boxes bundled into residential broadband subscriptions rather than sold direct to consumers.

IEEE's registry holds five separate MA-L (24-bit OUI) blocks for AirTies, all registered to two Istanbul, Turkey addresses — three prefixes at one address, two at the other. No MA-M or MA-S assignments exist for the company. Five distinct OUI blocks plus an identifiable, still-operating vendor place this well above the single-OUI "shell" registration threshold.

AirTies devices are managed through the AirTies Cloud / Vision app and are frequently co-branded — retail and support listings tie the hardware to AT&T and Frontier broadband plans, with named models including the Air5341 and Air4443. Independent ISP-integrator documentation corroborates the same mesh/DSL-CPE product category.

The vendor also has a documented CVE history: an IDOR letting attackers change SSID/PSK and map the LAN, a CSRF flaw in the Air5341's login page, a stack-based buffer overflow (RCE) across roughly a dozen DSL-modem models, and XSS in the Air4443. These are vendor- and model-wide firmware issues, not flaws tied to a specific OUI block.

IEEE assignment

5 MA-L prefixes → AirTies Wireless Networks, registered Istanbul, Turkey [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI) only; zero MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) hits for AirTies [Confirmed] — the IEEE MA-M registry, the IEEE MA-S registry

Registered addresses

"Gulbahar Mahallesi, Avni Diligil Sokak ISTANBUL ISTANBUL TR 34394" (88:41:FC, 00:1C:A8, 18:28:61) and "Esentepe Mah., Kore Şehitleri Cad. Istanbul Şişli TR 34360" (F4:17:B8, A0:2D:13) — the second address is hex-verified in IEEE's own CSV to literally substitute '?' for the Turkish Ş/ş diacritics; treat as a source data artifact, not a decoding bug

[Confirmed] — the IEEE MA-L registry (line 10122, hex-verified)

Company status

active [Confirmed] — https://airties.com/

Device types

ISP-provisioned CPE — Wi-Fi mesh extenders/access points, DSL/gateway modems, set-top boxes; managed via AirTies Cloud / Vision app [Confirmed] — airties.com, amazon.com listing, att.com support page

Notable products / deployments

AT&T- and Frontier-branded mesh extenders; Air5341 and Air4443 model lines named in CVE records [Confirmed] — amazon.com, att.com, cvedetails.com

Security history

IDOR (arbitrary SSID/PSK change, LAN mapping), CSRF (Air5341 fw 1.0.0.12), stack-based buffer overflow/RCE across ~12 DSL-modem models (incl. CVE-2022-38789), XSS (Air4443) — vendor/model-wide, not mapped to a specific OUI block [Confirmed] — cvedetails.com, vulmon.com

Registration dates

Unknown / not applicable — IEEE's the IEEE MA-L registry publishes no assignment-date column (only Registry, Assignment, Organization Name, Organization Address); no date attributed to IEEE for any of the 5 prefixes [Confirmed] — the IEEE MA-L registry (schema)

IANA Reference

not applicable — OUI/MAC assignments are IEEE Registration Authority records, not IANA; left blank [Confirmed]

Related vendors

none identified in this research pass [Unknown]

Analyst note

five OUI blocks plus corroborating product and CVE history place AirTies above the single-OUI "shell" threshold — the vendor page is warranted content, not a thin registration stub.