Carlo Gavazzi

A MAC address beginning with one of Carlo Gavazzi's registered prefixes belongs to hardware built by Carlo Gavazzi, an Italian-Swiss industrial electronics group, typically seen on energy meters, photoelectric sensors, solid-state relays, and network-connected building- or industrial-automation gateways.

Carlo Gavazzi Automation SpA traces to 1931 and is headquartered as a holding company in Steinhausen, Switzerland, with corporate operations in Lainate, Italy. The group runs roughly 23 wholly-owned sales subsidiaries plus around 60 independent distributors, and manufactures at factories in Italy, Mexico, Lithuania, Malta, and China.

Four separate IEEE OUI registrations trace to four distinct Carlo Gavazzi legal entities: Carlo Gavazzi Ltd in Malta, Carlo Gavazzi Controls SpA in Italy, and Carlo Gavazzi, Inc. in Houston, Texas, each holding an MA-L (/24) block. A fourth registration, an MA-S (/36) sub-block held by Carlo Gavazzi Industri in Denmark, sits inside the IEEE-administered shared base 70:B3:D5 — that base itself is sub-allocated to thousands of unrelated registrants, so only the specific sub-block belongs to Carlo Gavazzi, not the base.

Product lines associated with these registrations include Modbus TCP/RS-485 energy meters and analyzers, the VMU-C EM web-server energy-monitoring gateway, photoelectric sensors for packaging and material handling, monitoring relays, soft starters, and the UWP3.0 web-based parking and access-control platform. A public CVE (CVE-2022-28814) documents a critical unauthenticated path-traversal flaw in UWP3.0 and the related CPY Car Park Server, independently corroborating that named, network-attached Carlo Gavazzi devices exist and are tracked in vulnerability databases.

Device class

Industrial and building-automation electronics — energy meters/analyzers, photoelectric sensors, solid-state relays, monitoring relays, and Ethernet/Modbus gateways

Company

Carlo Gavazzi Automation SpA, founded 1931, holding company in Steinhausen, Switzerland, corporate operations in Lainate, Italy (https://www.gavazziautomation.com/en-us/company/who-we-are)

OUI assignments

4 distinct registrations across 4 legal entities — 3x MA-L (/24) plus 1x MA-S (/36) sub-block under the shared IEEE base 70:B3:D5

Notable products

VMU-C EM energy-monitoring gateway; UWP3.0 web-based parking/access-control platform

Registry class

[Confirmed] 3x MA-L, 1x MA-S — the IEEE MA-L registry 6849B2, the IEEE MA-L registry 0019EE, the IEEE MA-L registry 0050A1, the IEEE MA-S registry 70B3D5EFF

Company

[Confirmed] Carlo Gavazzi Automation SpA, founded 1931 — https://www.gavazziautomation.com/en-us/company/who-we-are

Registered entities/countries

[Confirmed] Carlo Gavazzi Ltd (Malta), Carlo Gavazzi Controls SpA (Italy), Carlo Gavazzi, Inc. (United States), Carlo Gavazzi Industri (Denmark) — the IEEE MA-L registry 6849B2, the IEEE MA-L registry 0019EE, the IEEE MA-L registry 0050A1, the IEEE MA-S registry 70B3D5EFF

Website

[Confirmed] gavazziautomation.com — https://www.gavazziautomation.com/en-us/company/who-we-are

Product context

[Confirmed] VMU-C EM Modbus TCP energy-monitoring gateway — https://www.gavazziautomation.com/fileadmin/images/PIM/MANUALS/ENG/VMUCEM_IM_USE.pdf

Security

[Confirmed] CVE-2022-28814, critical (CVSS 9.8) path traversal in UWP3.0 / CPY Car Park Server, published 2022-09-28 — https://github.com/advisories/GHSA-jhgj-cw4j-x999

Registration date

[Unknown] IEEE does not publish OUI registration dates