Alpha Networks Inc. — 9 prefixes (MA-L)

Alpha Networks Inc. (明泰科技股份有限公司) is a Taiwanese networking-equipment ODM/OEM that holds nine MA-L (24-bit) OUI blocks, all registered to the company's Hsinchu Science Park address. The firm was spun off from D-Link Corporation in August 2003 and listed on the Taiwan Stock Exchange (ticker 3380) in December 2004, and it continues to design and manufacture hardware and firmware for D-Link and other branded customers under an ODM model. Its product mix spans enterprise and data-center switches, broadband CPE (routers and gateways), Wi-Fi access points, and IP surveillance cameras. For network-forensics work, the most important fact about Alpha Networks is CVE-2013-6026: a hardcoded authentication-bypass backdoor in Alpha Networks-developed router firmware, shared into D-Link and Planex products, that granted full unauthenticated admin access to any HTTP request carrying the User-Agent string "xmlset_roodkcableoj28840ybtide" (which reversed contains "edit by ... backdoor"). It was exploited in the wild beginning October 2013; D-Link shipped patches on November 28, 2013. Older SOHO router/gateway hardware on these OUIs (notably 00:0F:A3 and 00:18:02, the early D-Link-era blocks) is therefore an elevated-risk asset class when unpatched. No IEEE registration date exists for any OUI block; dates shown by third-party MAC lookup services are database artifacts, not IEEE facts.

IEEE assignment

9 prefixes → Alpha Networks Inc., registered Hsinchu Science Park, Hsinchu, Taiwan, TW [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI); 9 IEEE prefixes; no MA-M or MA-S entries found [Confirmed] — the IEEE MA-L registry (lines 2934, 2935, 3899, 10819, 19315, 22924, 24683, 25931, 34547); the IEEE MA-M registry / the IEEE MA-S registry (no entries). NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools (e.g. 2004-04-03 for 00:0F:A3) is a database artifact, not an IEEE fact.

HQ / country

No. 8, Li-Hsin 7th Rd. (also recorded as Li-shing Seventh Road), Hsinchu Science Park, Hsinchu, Taiwan, TW 300 (latest entry 300094) [Confirmed] — IEEE MA-L; alphanetworks.com

Company status

active; publicly traded on Taiwan Stock Exchange as 3380 (TPE) [Confirmed] — alphanetworks.com; stockanalysis.com/quote/tpe/3380

Local name

明泰科技股份有限公司 [Confirmed] — emis.com company profile

Founded

August 2003 (spin-off from D-Link Corporation; TWSE listing December 2004) [Confirmed] — alphanetworks.com/en/about

Device types

enterprise/data-center/SMB switches, broadband CPE (routers, gateways), Wi-Fi access points, IP surveillance cameras, industrial Ethernet; ODM/OEM supplier to branded names [Confirmed] — alphanetworks.com; finance.yahoo.com/quote/3380.TW/profile

All 9 prefixes (all MA-L, Alpha Networks Inc.)

00:0F:A3, 00:18:02, 00:1D:6A, 0C:83:CC, 48:8C:78, 54:2A:A2, 5C:33:8E, 88:6A:E3, D0:AE:EC [Confirmed] — IEEE the IEEE MA-L registry

D-Link relationship

spun off from D-Link (2003); continued as ODM supplying firmware/hardware to D-Link and others; the CVE-2013-6026 backdoor originated in Alpha Networks firmware shared across both vendors' products [Confirmed] — alphanetworks.com; subversivebytes.wordpress.com; krebsonsecurity.com

Security note

CVE-2013-6026 (NVD CVSS 2.0 base 10.0) — hardcoded auth-bypass backdoor triggered by User-Agent "xmlset_roodkcableoj28840ybtide"; affected D-Link DIR-100/DIR-120/DI-624S/DI-524UP/DI-604x/TM-G5240, Planex BRL-04R/04UR/04CW, and Alpha Networks routers; exploited in the wild Oct 2013; D-Link patched Nov 28, 2013

[Confirmed] — nvd.nist.gov/vuln/detail/cve-2013-6026; krebsonsecurity.com

Employee count

~6,392 (trailing-12-month) [Likely] — pitchbook.com/profiles/company/169842-61 (single-source)

Revenue

~USD $720M (trailing-12-month) [Likely] — pitchbook.com/profiles/company/169842-61 (single-source)

Allocated date

Unknown — IEEE publishes no OUI registration dates [Confirmed] — IEEE the IEEE MA-L registry schema

Analyst note

older blocks (00:0F:A3, 00:18:02) most likely pre-2010 D-Link-era SOHO router/gateway hardware and an elevated-risk asset class when running unpatched firmware; newer blocks (0C:83:CC, 48:8C:78) more likely 2020s enterprise switches or IP cameras. No post-2014 Alpha Networks-branded CVEs surfaced in this pass; absence of evidence is not absence of vulnerability.

[Likely] — nvd.nist.gov; cvedetails.com (vendor list page returned 403, not scrapable)