Bose Corporation holds 13 MA-L (24-bit OUI) blocks registered to "Bose Corporation," most carrying the legacy registry address "The Mountain, Framingham, MA" — Bose's longtime headquarters. One of those 13 blocks, 00:0C:8A, lists a distinct sub-address for the Automotive Systems Division (ASD) in Stow, MA; that is the same legal entity at a different site, not a separate registrant. A Bose OUI on a home or enterprise network most commonly resolves to a Wi-Fi smart speaker (the SoundTouch line, or the newer Bose Smart Soundbar 300/600/900/Ultra) or a Bluetooth audio device (QuietComfort headphones and earbuds, SoundLink portable speakers, aviation headsets). The SoundTouch and Smart Soundbar models expose a local HTTP/WebSocket API used by the companion app and integrate with Home Assistant as a Local Polling integration — which makes them worth inventorying as IoT endpoints rather than treating them as passive peripherals. Several CVEs have been documented against SoundTouch products, including remote control through a crafted WebSocket page, stored XSS via crafted Spotify/Pandora metadata or a malicious device name, and an mDNS responder (UDP 5353) on the SoundTouch 30 that answers unicast queries from non-link-local sources, enabling traffic-amplification denial-of-service and potential information disclosure. Separately, 2025 Bluetooth-chipset research listed Bose headphones among 29 affected devices where an attacker in range could intercept microphone audio, read media data, or impersonate the headphones to issue commands to a paired phone. One additional registrant to disambiguate: the MA-M block 48:5E:0E:C is assigned to "Transom Post OpCo LLC dba Bose Professional," the legal entity that acquired Bose's professional-audio division — a distinct registrant from "Bose Corporation," surfaced here because devices carrying it are still Bose-branded professional gear. The unrelated "BOSER TECHNOLOGY CO., LTD." (00:50:B7) is a different organization and is excluded.
- IEEE assignment
- 13 MA-L prefixes → Bose Corporation, registered The Mountain, Framingham, MA, US 01701-9168 [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv); maclookup.app vendor page
- Registry / block size
- MA-L (24-bit OUI); 13 IEEE prefixes (~218.1M addresses collectively per third-party snapshot); plus 1 MA-M (28-bit) block assigned to a successor professional-audio entity [Confirmed] — IEEE MA-L (oui.csv) + MA-M (mam.csv); maclookup.app. NOTE: IEEE's public OUI data publishes NO assignment/registration date (columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools (e.g. 2003-04-11 for 00:0C:8A on maclookup.app) is a database artifact, not an IEEE fact.
- HQ / country
- The Mountain, Framingham, MA 01701-9168, US (registry address) [Confirmed] — IEEE MA-L; en.wikipedia.org/wiki/Bose_Corporation
- Company status
- active; privately held, majority-owned by the Massachusetts Institute of Technology (MIT), which holds non-voting shares donated by founder Amar Bose in 2011; founded 1964 [Confirmed] — en.wikipedia.org/wiki/Bose_Corporation
- Device types
- Bluetooth headphones/earbuds (QuietComfort, Sport), Wi-Fi smart speakers (SoundTouch 10/20/30), smart soundbars (Bose Smart Soundbar 300/600/900/Ultra), home theater systems, portable Bluetooth speakers (SoundLink Flex, SoundLink Max), portable PA (S1 Pro), aviation headsets [Confirmed] — bose.com; support.bose.com (SoundTouch Wi-Fi); home-assistant.io/integrations/soundtouch
- Notable products
- QuietComfort headphones/earbuds, SoundLink portable speakers, SoundTouch Wi-Fi music systems, Smart Soundbar series, aviation headsets, S1 Pro portable PA [Confirmed] — bose.com
- Verified sample prefixes (all MA-L, Bose Corporation)
- C8:7B:23, 2C:41:A1, 08:DF:1F, AC:BF:71, 04:52:C7, 4C:87:5D, 78:2B:64, 28:11:A5, E4:58:BC, 68:F2:1F, BC:87:FA, 60:AB:D2, 00:0C:8A [Confirmed] — IEEE MA-L (oui.csv); maclookup.app/vendors/bose-corporation
- Sub-division block
- 00:0C:8A → Bose Corporation, Automotive Systems Division (ASD), Stow, MA 01775-9102 — same legal entity, distinct registry site [Confirmed] — IEEE MA-L (oui.csv)
- MA-M block (successor entity)
- 48:5E:0E:C → Transom Post OpCo LLC dba Bose Professional, 145 Pennsylvania Ave, Framingham, MA, US 01701 — distinct registrant from "Bose Corporation," holds the professional-audio division [Confirmed] — IEEE MA-M (mam.csv)
- Security context
- multiple documented SoundTouch CVEs (crafted-WebSocket remote control; stored XSS via Spotify/Pandora metadata or malicious device name; SoundTouch 30 mDNS responder on UDP 5353 answering non-link-local unicast queries → amplification DoS / info disclosure); separately, 2025 Bluetooth-chipset research listed Bose headphones among 29 affected devices (microphone interception, media-data read, headphone impersonation to a paired phone) [Confirmed] — cvedetails.com (Bose SoundTouch); bleepingcomputer.com (Sonos/Bose smart-speaker flaws); malwarebytes.com (2025 Bluetooth audio vulnerability)
- Special note
- IEEE publishes no OUI assignment dates — third-party "date registered" values are database artifacts only. Bose is privately held, majority-owned by MIT since 2011. No IANA RFC reference applies to MAC OUI entries (IANA Reference column stays blank). [Confirmed] — maclookup.app; en.wikipedia.org/wiki/Bose_Corporation
- Industry
- consumer and professional audio / IoT smart-home audio [Confirmed] — en.wikipedia.org/wiki/Bose_Corporation
- Related vendors
- Transom Post OpCo LLC dba Bose Professional (successor entity for the professional-audio division; separate MA-M registrant)
- Analyst note
- A Bose OUI on a network most commonly indicates a SoundTouch or Smart Soundbar Wi-Fi speaker, or a Bluetooth audio device. SoundTouch and Smart Soundbar models expose a local HTTP/WebSocket API — relevant for IoT / shadow-IT inventory and network segmentation, and the subject of several documented CVEs. Bluetooth-only devices (most QuietComfort headphones) won't carry an IP-layer MAC on Wi-Fi, so OUI sightings skew toward the Wi-Fi-capable speaker and soundbar lines.