BUFFALO.INC — 34 prefixes (MA-L)

Buffalo holds 34 MA-L (24-bit OUI) blocks, registered in the IEEE database under the verbatim name "BUFFALO.INC" — note the period before INC, exactly as it appears in oui.csv. Most blocks carry the AKAMONDORI Bldg. address in Naka-ku, Nagoya (Aichi Pref., JP 460-8315), while two older blocks (00-0D-0B and 74-03-BD) list earlier Nagoya addresses (MELCO HI-TECH CENTER and Shibata Hondori, JP 457-8520), a fingerprint of the company's Melco/Melco Holdings heritage. The operating company is Buffalo Inc.; its parent was renamed from Melco Holdings Inc. to Buffalo Inc. in April 2025. Founded in 1975 as Maki Engineering Laboratory (Melco) and originally an audio manufacturer, Buffalo entered computer peripherals in 1981 and is publicly traded on the Tokyo Stock Exchange (ticker 6676). Consolidating these 34 prefixes into one vendor entry is far more useful than minting near-identical per-prefix pages, because they all resolve to the same organization and the same three MAC-bearing product families: AirStation wireless LAN routers and access points, LinkStation home/SOHO NAS, and TeraStation SMB/enterprise NAS (also network switches and storage peripherals). Two caveats matter for any Buffalo OUI work. First, many AirStation models ship Broadcom/Atheros chipsets and support DD-WRT and Tomato third-party firmware, which can alter MAC behaviour on reflashed units. Second, Buffalo routers and NAS carry a long, ongoing CVE history — recurring OS-command-injection and authentication-bypass issues in router management interfaces — so a Buffalo OUI on a network is a useful asset-classification signal but also a prompt to check firmware currency. As with every vendor, IEEE publishes no registration date for MA-L blocks; any "date registered" on a third-party MAC database is a database artifact, not an IEEE fact.

IEEE assignment

34 prefixes → BUFFALO.INC, registered Nagoya, Aichi, JP [Confirmed] — IEEE MA-L (oui.csv)

Registry / block size

MA-L (24-bit OUI); 34 IEEE prefixes; no MA-M (mam.csv) or MA-S (oui36.csv) assignments held [Confirmed] — IEEE registry CSVs (oui.csv / mam.csv / oui36.csv). NOTE: IEEE's public OUI data publishes NO assignment/registration date (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

Registered org name

"BUFFALO.INC" (verbatim, with a period before INC) [Confirmed] — IEEE MA-L (oui.csv)

HQ / country

AKAMONDORI Bldg., 30-20, Ohsu 3-chome, Naka-ku, Nagoya, Aichi Pref. 460-8315, JP (primary registry address; two older blocks list MELCO HI-TECH CENTER / Shibata Hondori, Nagoya JP 457-8520) [Confirmed] — IEEE MA-L (oui.csv)

Company status

active; operating company Buffalo Inc.; parent renamed Melco Holdings Inc. → Buffalo Inc. in April 2025; Tokyo Stock Exchange ticker 6676 [Confirmed] — https://www.buffaloamericas.com/about/about-buffalo , https://en.wikipedia.org/wiki/Melco , https://sharedresearch.jp/en/companies/6676

Corporate background

founded 1975 by Makoto Maki as Maki Engineering Laboratory (Melco); audio origins, entered computer peripherals 1981; offices in Japan, USA (Buffalo Americas), Taiwan, Korea, Europe [Confirmed] — https://en.wikipedia.org/wiki/Melco , https://www.buffaloamericas.com/about/about-buffalo

Device types

(1) AirStation — wireless LAN routers / access points; (2) LinkStation — home/SOHO NAS (2–4 bay); (3) TeraStation — SMB/enterprise NAS (4–12 bay); also network switches and USB/storage peripherals [Confirmed] — https://en.wikipedia.org/wiki/Buffalo_AirStation , https://en.wikipedia.org/wiki/Buffalo_network-attached_storage_series , https://www.buffaloamericas.com/about/about-buffalo

Verified sample prefixes (all MA-L, BUFFALO.INC)

D4-2C-46, 34-3D-C4, 00-07-40, 00-24-A5, CC-E1-D5 [Confirmed] — IEEE MA-L (oui.csv)

Older-address blocks (Melco-era)

00-0D-0B and 74-03-BD list Nagoya JP 457-8520 addresses, consistent with the company's earlier Melco corporate history [Confirmed] — IEEE MA-L (oui.csv)

Third-party firmware

many AirStation models support DD-WRT and Tomato (Broadcom/Atheros chipsets); reflashed units may present altered MAC behaviour relevant to fingerprinting [Likely] — https://en.wikipedia.org/wiki/Buffalo_AirStation

Security history

long, ongoing CVE record in routers and NAS — e.g. CVE-2021-20090 (auth bypass, Arcadyan-shared firmware), CVE-2024-44072 (OS command injection, JVN#12824024), 2025 path-traversal/hash issues, and a March-2026 batch (CVE-2026-27650/-32669/-32678/-33280/-33366). Pattern: recurring OS-command-injection and authentication weaknesses in router management UIs; authenticated-prerequisite bugs dominate recent disclosures [Confirmed] — https://www.tenable.com/security/research/tra-2021-13 , https://nvd.nist.gov/vuln/detail/CVE-2024-44072 , https://securityvulnerability.io/vendor/buffalo%20inc/latest-vulnerabilities

Primary market

Japan (top market share in wireless LAN and external storage); also North America (Buffalo Americas) and Europe; segments span consumer, SOHO, SMB, and regulated industries [Confirmed] — https://sharedresearch.jp/en/companies/6676 , https://www.buffaloamericas.com/about/about-buffalo

Notable context

temporarily halted US wireless LAN supply in late 2007 over CSIRO 802.11 patent litigation; routers appear frequently in SOHOpelessly Broken-class research; Buffalo Americas now maintains a security-notices page [Confirmed] — https://www.securityweek.com/sohopelessly-broken-20-125-vulnerabilities-found-routers-nas-devices/ , https://buffaloamericas.com/resources/buffalo-security-notices-home

Allocated date

Unknown — IEEE publishes no registration dates for MA-L OUI blocks; none available from the registry [Confirmed] — https://standards-oui.ieee.org/oui/oui.csv

Related vendors

Melco (former parent name); Buffalo Americas (regional operating arm)

Analyst note

a BUFFALO.INC OUI on a globally-administered address identifies genuine Buffalo hardware (predominantly AirStation networking or LinkStation/TeraStation NAS); given the device class and CVE history, treat such a sighting as a prompt to verify firmware currency, and note that DD-WRT/Tomato reflashes can change observed MAC behaviour.