Altice Labs, S.A. — 5 prefixes (MA-L), plus 1 MA-M (Altice Labs India)

Altice Labs is the dedicated R&D and innovation centre for Altice Portugal and the wider Altice Group, headquartered in Aveiro, Portugal. The company traces its roots to 1950 and was formally incorporated in 1999 as Portugal Telecom Inovação (PT Inovação); it was renamed Altice Labs in 2016 after Altice's acquisition of Portugal Telecom. Its IEEE footprint is small and tightly scoped to ISP-deployed customer premises equipment rather than retail consumer goods: five MA-L (24-bit OUI) blocks registered to the Portuguese parent, plus one MA-M (28-bit) block registered separately to "Altice Labs India" in Hyderabad — a distinct registrant, not the same legal entity. The hardware behind these allocations is mostly the FiberGateway series of GPON/fiber CPE gateways (ONT-plus-router units such as the GR240BG, GR241AG, GR140DG), alongside 10G PON OLT platforms, fixed-wireless-access CPE, smart Wi-Fi systems, and 5G small cells. Because these are ISP-managed devices on the subscriber LAN and management plane (TR-069 / OMCI), the security exposure differs from internet-facing server hardware; the one confirmed active CVE for the line (CVE-2026-31195, an authenticated root command injection in the GR140DG ping diagnostic handler) underlines that these gateways are still attack surface inside the home network. As with every OUI, the absence of an Altice Labs prefix never means "not Altice Labs," and IEEE publishes no registration dates for any of these blocks.

IEEE assignment (parent)

5 MA-L prefixes → Altice Labs, registered Aveiro, Portugal [Confirmed] — IEEE MA-L (lines 7123, 15006, 22871, 22872, 38685)

IEEE assignment (subsidiary)

1 MA-M prefix → "Altice Labs India", Hyderabad, India [Confirmed] — IEEE MA-M (line 3632)

Registry / block size

MA-L (24-bit OUI) for the five parent blocks; MA-M (28-bit) for the India block. No MA-S assignments found. [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry. NOTE: IEEE's public OUI/MA-M data publishes NO assignment/registration date; any "date registered" on third-party lookup tools (e.g. maclookup.app) is a database artifact, not an IEEE fact.

Verified MA-L prefixes (all Altice Labs, Portugal)

C8:70:23, 68:AA:C4, 58:FC:20, 1C:57:3E, 50:67:E0 [Confirmed] — IEEE MA-L / maclookup.app

MA-M prefix (Altice Labs India)

C0:48:2F:4 [Confirmed] — IEEE MA-M

HQ / country (parent)

Rua Engenheiro José Ferreira Pinto Basto, 3810-106 Aveiro, Aveiro, Portugal (registry; VAT/NIF PT504705610) [Confirmed] — IEEE MA-L / alticelabs.com

Address (India subsidiary)

Plot No 1293, Road No 63, Jubilee Hills, Hyderabad, Telangana 500033, India [Confirmed] — IEEE MA-M

Company status

active [Confirmed] — alticelabs.com

Parent / corporate history

Altice Group via Altice Portugal; formerly Portugal Telecom Inovação, S.A. (PT Inovação), rebranded Altice Labs in 2016 following Altice's acquisition of Portugal Telecom [Confirmed] — alticelabs.com/blog/pt-inovacao-is-altice-labs, telecom.pt 2016 press release

Device types

GPON/fiber CPE gateways (FiberGateway series — GR240BG, GR241AG, GR140DG, ONT+router combo CPE for FTTH); 10G PON OLT platforms; fixed-wireless-access CPE; smart Wi-Fi systems and Wi-Fi 7 routers/extenders; 5G small cells; optical distribution network products. ISP-deployed consumer/business premises equipment, not general retail.

[Confirmed] — alticelabs.com, manualslib.com (GR240BG), fccid.io (GR240BG)

Industry

telecommunications equipment & software (carrier R&D)

Security context

CVE-2026-31195 (CVSS 8.8 HIGH, published 2026-05-05, status Awaiting Analysis) — authenticated OS command injection in the ping diagnostic handler (/bin/httpd_clientside) of the Altice Labs / SFR GR140DG FiberGateway via the unsanitized destAddr parameter; affected firmware 3GN8020801R13, 3GN8020802R0A, 3GN8020803R0A; mitigations: vendor firmware update, sanitize system() inputs, disable unused ping diagnostic. Same FiberGateway line ships as ISP CPE in France (SFR) and Portugal (NOS/Altice Portugal).

[Confirmed] — cvefeed.io/vuln/detail/CVE-2026-31195

Security posture

ISP-managed CPE on the subscriber LAN and management plane (TR-069/OMCI), not internet-facing server hardware; the one confirmed CVE requires authentication. No IANA RFC references applicable. No wildcard/spoofing concerns specific to this OUI are documented. [Likely] — cvefeed.io, alticelabs.com

Analyst note

A globally-administered Altice Labs OUI on a device almost always indicates ISP-provided FTTH CPE (a FiberGateway ONT/router). The India MA-M block (C0:48:2F:4) is a separate registrant and should not be merged into the Portuguese parent entity. Don't rely on OUI alone for asset classification — these gateways are bridged/managed and the prefix space is small.

Related vendors

Altice Labs India (MA-M registrant, Hyderabad — distinct legal entity)