Bosch Access Systems GmbH — 2 prefixes (MA-L)
Summary
- // what this is
- Bosch Access Systems is registered to MAC prefix
00:10:17and 1 more in the IEEE OUI database. When a device's MAC address begins with00:10:17, that block was registered by Bosch Access Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Two independently-registered MA-L blocks under an identifiable, still-operating access-control vendor with a citable product line and vendor security advisory — clears the bar for verifiable company substance beyond a bare IEEE registration.
About this vendor.
A MAC address beginning with 00:10:17 or 00:1B:86 belongs to Bosch Access Systems GmbH, an IEEE-registered vendor holding two MA-L blocks under the identical registrant string and address, Charlottenburger Allee 50, Aachen, Germany. Devices carrying these prefixes are physical access-control hardware — door controllers, card and biometric readers, and keypads — not general-purpose networking gear.
The company traces an unbroken German commercial-register lineage under Aachen registration HRB 1861: originally MICOS-MIKRO-MINI-COMPUTER-SYSTEME Beratungs- und Dienstleistungs-GmbH, later Bosch Access Systems GmbH, and today Radionix GmbH, trading as part of the Keenfinity Group and still marketing "Bosch access control" branded hardware. A Robert Bosch GmbH shareholding was recorded as of September 2025.
The product line built on these prefixes is the Access Modular Controller (AMC2), paired with access-management software (AMS, BIS-ACE, APE). Bosch's own PSIRT published advisory bosch-sa-940448-bt against this exact line: CVE-2021-23842 (an extractable Blowfish key in AMC2 firmware) and CVE-2021-23843 (unauthenticated configuration tools permitting device reconfiguration), fixed in AMS 4.0 / BIS 4.9.1 plus hardened AMC2 firmware.
IEEE's public the IEEE MA-L registry publishes no assignment or registration date for either block. Third-party lookup tools show "initially filed" dates (2007-03-01 for 001B86; 1998-04-22 for 001017), but these are database artifacts of the third-party service, not IEEE facts, and must not be cited as an IEEE registration date.
- IEEE assignment
- 2 prefixes (00:10:17, 00:1B:86) → Bosch Access Systems GmbH, registered Aachen, Germany [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86
- Registry / block size
- MA-L (24-bit OUI); 2 IEEE prefixes, identical registrant string and address for both [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86
- HQ / country
- Charlottenburger Allee 50, Aachen, Germany D-52068 (registry address) [Confirmed] — the IEEE MA-L registry 001B86
- Company status
- active under successor name Radionix GmbH, trading as part of Keenfinity Group; unbroken commercial-register lineage from HRB 1861 (Aachen) through MICOS-MIKRO-MINI-COMPUTER-SYSTEME and Bosch Access Systems GmbH[Confirmed] — https://www.northdata.com/Radionix%20GmbH,%20Aachen/HRB%201861, https://www.radionix.com/us/en/company/about-us/
- Device types
- access control panels/door controllers (AMC2), card readers, biometric/fingerprint readers, keypads [Confirmed] — https://www.radionix.com/us/en/access-control/bosch-access-control-systems/, https://media.boschsecurity.com/fs/media/en/pb/media/products_1/access_control_1/acs_product_overview.pdf
- Notable products
- Access Modular Controller (AMC2); AMS (Access Management System), BIS-ACE (Building Integration System Access Engine), APE (Access Professional Edition) software [Confirmed] — https://media.boschsecurity.com/fs/media/en/pb/media/products_1/access_control_1/acs_product_overview.pdf
- Verified sample prefixes (both MA-L, Bosch Access Systems GmbH)
- 00:10:17, 00:1B:86 [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86; https://maclookup.app/macaddress/001017, https://maclookup.app/macaddress/001b86
- Security advisory
- Bosch PSIRT bosch-sa-940448-bt covers this product line — CVE-2021-23842 (CVSS 5.7, extractable Blowfish key in AMC2 firmware) and CVE-2021-23843 (CVSS 8.8, unauthenticated AccessIPConfig.exe/AmcIpConfig.exe configuration tools); fixed in AMS 4.0 / BIS 4.9.1 plus hardened AMC2 firmware[Confirmed] — https://psirt.bosch.com/security-advisories/bosch-sa-940448-bt.html
- Special note
- IEEE the IEEE MA-L registry publishes no assignment/registration date. maclookup.app shows third-party "initially filed" dates (2007-03-01 for 001B86; 1998-04-22 for 001017) — database artifacts, not IEEE facts; do not attribute to IEEE[Confirmed] — https://maclookup.app/macaddress/001b86, https://maclookup.app/macaddress/001017
- Related vendors
- Robert Bosch GmbH (shareholder as of Sept 2025); Bosch Sicherheitssysteme GmbH (profit-transfer agreement ended Jan 2025); successor entity Radionix GmbH (Keenfinity Group) [Confirmed] — https://www.northdata.com/Radionix%20GmbH,%20Aachen/HRB%201861
- Analyst note
- Two independently-registered MA-L blocks under an identifiable, still-operating access-control vendor (now Radionix GmbH) with a citable product line and vendor security advisory clear the bar for verifiable company substance beyond a bare IEEE registration [Confirmed]