Casa Systems
Summary
- // what this is
- Casa Systems is registered to MAC prefix
F02E51and 1 more in the IEEE OUI database. When a device's MAC address begins withF02E51, that block was registered by Casa Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device. Casa Systems has ceased operations, but the registration remains on record with IEEE. - // analyst note
- Devices carrying these prefixes are more likely NetComm-branded CPE than Casa's carrier-grade CMTS hardware, given the shared registrant address, but no specific model-to-prefix mapping is confirmed, so treat that attribution as Likely rather than Confirmed. When checking for advisories, do not conflate NVD's unrelated 'CasaOS'/'ZimaOS' results with this vendor.
About this vendor.
A MAC address starting F0:2E:51 or D0:DB:B7 belongs to Casa Systems, and is most likely found on NetComm-branded broadband customer-premises equipment rather than Casa's own carrier-grade cable gear.
Casa Systems Inc. was a NASDAQ-listed (CASA) cable and broadband infrastructure vendor founded in 2003 and headquartered in Andover, Massachusetts, building DOCSIS cable modem termination systems and converged cable access platforms (CMTS/CCAP) for cable operators.
Both registered OUI blocks carry the address of NetComm Wireless's Lane Cove West, NSW office, not Casa's Massachusetts headquarters. Casa acquired the ASX-listed Australian CPE vendor NetComm Wireless in a roughly A$161M deal that completed 1 July 2019, and these prefixes were most likely registered for NetComm-branded VDSL, fixed-wireless, and industrial IoT/M2M routers made while NetComm operated as a Casa subsidiary.
Casa Systems filed for Chapter 11 bankruptcy in 2024 and was broken up across three separate asset sales the same year: its cloud business went to Lumine Group, its NetComm/fixed-wireless business went to DZS Inc. for $7M, and its cable/CMTS hardware business went to CommScope for $45.1M. Two high-severity remote-code-execution CVEs are recorded against NetComm-branded Casa Systems hardware, both disclosed independently of Casa.
A search of NVD for "Casa Systems" also surfaces unrelated CVEs against "CasaOS"/"ZimaOS", an open-source home-server project from a different company; those do not belong to this vendor.
- Device class
- Broadband CPE and carrier infrastructure — NetComm-branded VDSL/fixed-wireless routers and industrial IoT/M2M LTE routers most likely, Casa's own DOCSIS CMTS/CCAP carrier hardware also possible
- Company status
- Defunct as an independent company — Chapter 11 bankruptcy filed 2024, assets sold off in three separate 2024 transactions
- Registered address
- 18-20 Orion Road, Lane Cove West, NSW, Australia 2066 (NetComm Wireless's office, not Casa's Massachusetts HQ)
- Corporate lineage
- Acquired NetComm Wireless in 2019; cable/CMTS business later sold to CommScope, NetComm/fixed-wireless business to DZS Inc., cloud business to Lumine Group (all 2024)
- Known vulnerabilities
- CVE-2024-25290 and CVE-2024-26519, both unauthenticated remote code execution in NetComm-branded devices (cybercx.com.au)
- Organization
- Casa Systems [Confirmed] (the IEEE MA-L registry F02E51, D0DBB7)
- Registry class
- MA-L (/24) [Confirmed] (the IEEE MA-L registry F02E51, D0DBB7)
- Prefixes
- F02E51, D0DBB7 [Confirmed] (the IEEE MA-L registry F02E51, D0DBB7)
- Registered address
- 18-20 Orion Road, Lane Cove West NSW AU 2066 [Confirmed] (the IEEE MA-L registry F02E51, D0DBB7)
- Registration date
- Unknown — IEEE publishes no registration dates for OUI assignments [Unknown]
- Corporate background
- NASDAQ-listed (CASA), founded 2003, headquartered in Andover, Massachusetts, DOCSIS CMTS/CCAP vendor [Confirmed] (https://investors.casa-systems.com/news-releases/news-release-details/casa-systems-acquire-netcomm-wireless-recommended-transaction)
- NetComm acquisition
- Completed 1 July 2019, roughly A$161M scheme of arrangement [Confirmed] (https://www.globenewswire.com/news-release/2019/07/01/1876655/0/en/Casa-Systems-Accelerates-its-Broadband-Convergence-Strategy-with-Completion-of-NetComm-Acquisition.html)
- 2024 breakup
- Cloud assets to Lumine Group (~April 2024); NetComm/fixed-wireless business to DZS Inc. for $7M (~May 2024); cable/CMTS hardware business to CommScope for $45.1M, closing ~6 June 2024 [Confirmed] (https://www.sdxcentral.com/news/bankrupt-casa-systems-sells-netcomm-wireless-to-dzs-for-7m/, https://ir.commscope.com/news-releases/news-release-details/commscope-selected-highest-and-best-bid-auction-acquire-cable/)
- Known CVEs
- CVE-2024-25290 (CVSS 3.1 8.0 HIGH, unauthenticated RCE in NetComm NL1901ACV VDSL modem) and CVE-2024-26519 (CVSS 3.1 9.0 CRITICAL, RCE in NetComm NTC-221 industrial router) [Confirmed] (https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-25290, https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-26519)
- Homonym caveat
- NVD keyword searches for "Casa Systems" also return unrelated CVEs against "CasaOS"/"ZimaOS" from IceWhale Technology, a different company [Confirmed] (https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=Casa%20Systems)