MAC address vendor

Bosch Access Systems GmbH — 2 prefixes (MA-L)

Primary prefix
00:10:17
Block
MA-L
Status
Active

Summary

// what this is
Bosch Access Systems is registered to MAC prefix 00:10:17 and 1 more in the IEEE OUI database. When a device's MAC address begins with 00:10:17, that block was registered by Bosch Access Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
Two independently-registered MA-L blocks under an identifiable, still-operating access-control vendor with a citable product line and vendor security advisory — clears the bar for verifiable company substance beyond a bare IEEE registration.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High

A MAC address beginning with 00:10:17 or 00:1B:86 belongs to Bosch Access Systems GmbH, an IEEE-registered vendor holding two MA-L blocks under the identical registrant string and address, Charlottenburger Allee 50, Aachen, Germany. Devices carrying these prefixes are physical access-control hardware — door controllers, card and biometric readers, and keypads — not general-purpose networking gear.

The company traces an unbroken German commercial-register lineage under Aachen registration HRB 1861: originally MICOS-MIKRO-MINI-COMPUTER-SYSTEME Beratungs- und Dienstleistungs-GmbH, later Bosch Access Systems GmbH, and today Radionix GmbH, trading as part of the Keenfinity Group and still marketing "Bosch access control" branded hardware. A Robert Bosch GmbH shareholding was recorded as of September 2025.

The product line built on these prefixes is the Access Modular Controller (AMC2), paired with access-management software (AMS, BIS-ACE, APE). Bosch's own PSIRT published advisory bosch-sa-940448-bt against this exact line: CVE-2021-23842 (an extractable Blowfish key in AMC2 firmware) and CVE-2021-23843 (unauthenticated configuration tools permitting device reconfiguration), fixed in AMS 4.0 / BIS 4.9.1 plus hardened AMC2 firmware.

IEEE's public the IEEE MA-L registry publishes no assignment or registration date for either block. Third-party lookup tools show "initially filed" dates (2007-03-01 for 001B86; 1998-04-22 for 001017), but these are database artifacts of the third-party service, not IEEE facts, and must not be cited as an IEEE registration date.

IEEE assignment
2 prefixes (00:10:17, 00:1B:86) → Bosch Access Systems GmbH, registered Aachen, Germany [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86
Registry / block size
MA-L (24-bit OUI); 2 IEEE prefixes, identical registrant string and address for both [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86
HQ / country
Charlottenburger Allee 50, Aachen, Germany D-52068 (registry address) [Confirmed] — the IEEE MA-L registry 001B86
Company status
active under successor name Radionix GmbH, trading as part of Keenfinity Group; unbroken commercial-register lineage from HRB 1861 (Aachen) through MICOS-MIKRO-MINI-COMPUTER-SYSTEME and Bosch Access Systems GmbH
[Confirmed] — https://www.northdata.com/Radionix%20GmbH,%20Aachen/HRB%201861, https://www.radionix.com/us/en/company/about-us/
Device types
access control panels/door controllers (AMC2), card readers, biometric/fingerprint readers, keypads [Confirmed] — https://www.radionix.com/us/en/access-control/bosch-access-control-systems/, https://media.boschsecurity.com/fs/media/en/pb/media/products_1/access_control_1/acs_product_overview.pdf
Notable products
Access Modular Controller (AMC2); AMS (Access Management System), BIS-ACE (Building Integration System Access Engine), APE (Access Professional Edition) software [Confirmed] — https://media.boschsecurity.com/fs/media/en/pb/media/products_1/access_control_1/acs_product_overview.pdf
Verified sample prefixes (both MA-L, Bosch Access Systems GmbH)
00:10:17, 00:1B:86 [Confirmed] — the IEEE MA-L registry 001017, the IEEE MA-L registry 001B86; https://maclookup.app/macaddress/001017, https://maclookup.app/macaddress/001b86
Security advisory
Bosch PSIRT bosch-sa-940448-bt covers this product line — CVE-2021-23842 (CVSS 5.7, extractable Blowfish key in AMC2 firmware) and CVE-2021-23843 (CVSS 8.8, unauthenticated AccessIPConfig.exe/AmcIpConfig.exe configuration tools); fixed in AMS 4.0 / BIS 4.9.1 plus hardened AMC2 firmware
[Confirmed] — https://psirt.bosch.com/security-advisories/bosch-sa-940448-bt.html
Special note
IEEE the IEEE MA-L registry publishes no assignment/registration date. maclookup.app shows third-party "initially filed" dates (2007-03-01 for 001B86; 1998-04-22 for 001017) — database artifacts, not IEEE facts; do not attribute to IEEE
[Confirmed] — https://maclookup.app/macaddress/001b86, https://maclookup.app/macaddress/001017
Related vendors
Robert Bosch GmbH (shareholder as of Sept 2025); Bosch Sicherheitssysteme GmbH (profit-transfer agreement ended Jan 2025); successor entity Radionix GmbH (Keenfinity Group) [Confirmed] — https://www.northdata.com/Radionix%20GmbH,%20Aachen/HRB%201861
Analyst note
Two independently-registered MA-L blocks under an identifiable, still-operating access-control vendor (now Radionix GmbH) with a citable product line and vendor security advisory clear the bar for verifiable company substance beyond a bare IEEE registration [Confirmed]
[ 02 ] — OUI prefixes

Assignments by IEEE.

2
// registered prefixes2
  1. 00:10:17MA-L
  2. 00:1B:86MA-L
[ 03 ] — Related

Keep digging.