MAC address vendor

B&R Industrial Automation GmbH — 3 prefixes (MA-L)

Primary prefix
00:60:65
Block
MA-L
Status
Active

Summary

// what this is
B&R Industrial Automation is registered to MAC prefix 00:60:65 and 2 more in the IEEE OUI database. When a device's MAC address begins with 00:60:65, that block was registered by B&R Industrial Automation — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
Three same-address MA-L blocks plus a multi-year CISA ICS advisory history confirm this is a substantive, actively-deployed OT/ICS vendor.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High

A MAC address beginning 00:60:65, 00:15:1E, or 00:11:1E belongs to B&R Industrial Automation GmbH, an Austrian industrial-automation manufacturer that now operates as ABB's Machine & Factory Automation business unit. Devices carrying these prefixes are typically PLCs, Automation PC industrial computers, HMI panels, and motion-control or safety controllers deployed on factory-floor OT/ICS networks.

B&R was founded in 1979 by Erwin Bernecker and Josef Rainer, headquartered in Eggelsberg, Upper Austria. ABB announced its acquisition of B&R in April 2017 and completed the deal that July; B&R continues to ship hardware under its own brand as part of ABB's automation portfolio, so devices from both before and after 2017 can legitimately carry these OUIs.

IEEE's registry holds three separate MA-L blocks for B&R — 00:60:65, 00:15:1E, and 00:11:1E — all registered under the same company name and Eggelsberg address, consistent with a long-running hardware manufacturer that worked through earlier address pools rather than a thin or shell registration. IEEE's own the IEEE MA-L registry publishes no assignment date for any of the three; a third-party aggregator's "initially registered 22 April 1998" claim for 00:60:65 is a database artifact, not an IEEE fact, and is not carried into this entry.

B&R's Automation Studio and Automation Runtime software have accumulated CISA ICS advisories from 2020 through 2026 — including unrestricted file upload leading to code execution, weak TLS/crypto configuration, certificate-validation flaws, unthrottled-resource-allocation DoS, and an XZ Utils supply-chain exposure — indicating these are actively deployed, actively monitored OT platforms rather than legacy or dormant hardware.

IEEE assignment
3 prefixes → B&R Industrial Automation GmbH, registered Eggelsberg, AT [Confirmed] — the IEEE MA-L registry lines 6175, 15564, 15569; the Wireshark manufacturer database lines 4368, 5392, 15272
Registry / block size
MA-L (24-bit OUI); 3 IEEE prefixes, all same registrant/address [Confirmed] — the IEEE MA-L registry
HQ / country
B&R Straße 1, Eggelsberg, AT 5142, Austria [Confirmed] — the IEEE MA-L registry
Company status
active, operating as ABB's Machine & Factory Automation business unit since the 2017-07-06 acquisition close [Confirmed] — new.abb.com/news/detail/1797, new.abb.com/news/detail/1233
Founded
1979 by Erwin Bernecker and Josef Rainer [Confirmed] — en.wikipedia.org/wiki/B%26R
Device types
PLCs, Automation PC industrial computers, HMI panels, motion-control controllers, safety controllers, EtherNet/IP field controllers [Likely] — br-automation.com
Notable products
Automation Studio (engineering software), Automation Runtime (device firmware/runtime) [Confirmed] — CISA ICS advisories citing these products
Verified sample prefixes (all MA-L, B&R Industrial Automation GmbH)
00:60:65, 00:15:1E, 00:11:1E [Confirmed] — the IEEE MA-L registry
Security context
CISA ICS advisories for Automation Studio/Runtime span 2020-2026 (ICSA-20-051-01, ICSA-20-093-01, ICSA-22-228-05, ICSA-25-028-01, ICSA-26-125-03, ICSA-26-125-04, ICSA-26-181-05), confirming active, currently-deployed use [Confirmed] — cisa.gov/news-events/ics-advisories
Registration-date caveat
IEEE the IEEE MA-L registry publishes no assignment date for any B&R block; a third-party aggregator (rst.im) shows "initially registered 22 April 1998" for 00:60:65 — this is a database artifact, not an IEEE fact, and must not be published as an IEEE registration date
[Confirmed] — rst.im/oui/00-60-65 (cited only to flag, not adopt)
Entity-resolution note
an initial registry pass surfaced a single-OUI Brazilian registrant ("DLG Automação Industrial Ltda", 90:6D:C8) under a literal "BR = Brazil" reading of the slug; this entry instead follows this vendor set's company-name-derived slug convention (B&R Industrial Automation → br-industrial-automation), which is independently corroborated by multiple sources and a 3-block registry footprint rather than a single bare assignment
[Confirmed] — the IEEE MA-L registry; br-automation.com; en.wikipedia.org/wiki/B%26R
Related vendors
ABB (parent company since 2017) [Confirmed] — new.abb.com
Analyst note
three same-address MA-L blocks plus a multi-year CISA ICS advisory history confirm this is a substantive, actively-deployed OT/ICS hardware vendor, not a shell registration.
[ 02 ] — OUI prefixes

Assignments by IEEE.

3
// registered prefixes3
  1. 00:60:65MA-L
  2. 00:15:1EMA-L
  3. 00:11:1EMA-L
[ 03 ] — Related

Keep digging.