Cavium — 2 prefixes (MA-L)

Cavium holds two IEEE MA-L blocks, registered under two slightly different names that reflect the company's history: 00:0F:B7 to "Cavium" (registry address 2315 N First Street, San Jose, CA) and 34:80:0D to "Cavium Inc" (15485 Sand Canyon Ave, Irvine, CA). Cavium was a fabless semiconductor company founded in 2000 in San Jose, making ARM- and MIPS-based network, security, and server processors — the OCTEON, NITROX, ThunderX, LiquidIO, and Octeon Fusion families. Marvell Technology completed its roughly $6 billion acquisition of Cavium on July 6, 2018; the product lines now ship under Marvell, but the OUI registrations remain under the legacy Cavium names. The important practical point for anyone reading a Cavium MAC in a scan: these are embedded SoC and silicon prefixes, not consumer-endpoint brands. A Cavium OUI on an interface signals infrastructure-class hardware — a router, Layer-4+ switch, firewall/VPN appliance, SSL/IPsec acceleration card, server SoC, or SmartNIC — gear that often sits in a privileged, inline network position. Security-relevant context: CVE-2017-17428 (CVSS 5.9) covered a ROBOT/Bleichenbacher RSA padding-oracle weakness in Cavium's NITROX/TurboSSL SSL SDK families that could let an attacker decrypt TLS ciphertext, and the OCTEON SDK carries its own tracked CVE history — so a Cavium prefix is worth noting as a high-impact device class rather than a benign endpoint. No IEEE registration dates are claimed here: IEEE publishes none, and the "2004-04-03" / "2018-04-05" dates seen on third-party lookup tools are database artifacts, not IEEE facts.

IEEE assignment

2 prefixes → "Cavium" (00:0F:B7) and "Cavium Inc" (34:80:0D), MA-L [Confirmed] — IEEE the IEEE MA-L registry (file:the IEEE MA-L registry)

Registry / block size

both MA-L (24-bit OUI, ~16.7M addresses each); no MA-M or MA-S entries for this vendor [Confirmed] — file:the IEEE MA-M registry, file:the IEEE MA-S registry (no match)

Registry addresses

00:0F:B7 → 2315 N First Street, San Jose, CA 95131, US; 34:80:0D → 15485 Sand Canyon Ave, Irvine, CA 92618, US [Confirmed] — file:the IEEE MA-L registry

HQ / country

San Jose, CA, US (founded 2000; San Jose 2315 N First Street is the registry address of record) [Confirmed] — https://en.wikipedia.org/wiki/Cavium

Company status

acquired — Marvell Technology completed its ~$6B acquisition on July 6, 2018; product lines continue under Marvell, OUIs remain under legacy Cavium names [Confirmed] — https://en.wikipedia.org/wiki/Cavium, https://www.rcrwireless.com/20180709/chips/marvell-completes-cavium-acquisition

Device types

embedded SoCs/silicon, NOT end-user devices — MACs appear on routers, Layer-4+ switches, security/VPN appliances, SSL/IPsec acceleration cards, data-center server SoCs (ThunderX/ThunderX2), SmartNICs (LiquidIO), and LTE base-station gear (Octeon Fusion)

[Confirmed] — https://en.wikipedia.org/wiki/Cavium

Product lines

OCTEON (MIPS64 multi-core packet/DPI/IPsec processors), NITROX (crypto/security coprocessors, SSL/IPsec/VPN), ThunderX/ThunderX2 (ARMv8 server SoCs), LiquidIO (SmartNICs), Octeon Fusion (base-station SoCs); switch ASICs via Xpliant (2014), FC/storage HBAs via QLogic (2016)

[Confirmed] — https://en.wikipedia.org/wiki/Cavium

No IEEE date

IEEE public OUI data (Registry, Assignment, Organization Name, Organization Address) contains NO registration date. Third-party tools show 2004-04-03 (00:0F:B7) and 2018-04-05 (34:80:0D); these are database artifacts, not IEEE facts — do not publish them as IEEE dates

[Confirmed] — https://maclookup.app/vendors/cavium, https://maclookup.app/vendors/cavium-inc

Security context

CVE-2017-17428 (CVSS 5.9, Medium) — ROBOT/Bleichenbacher RSA padding-oracle weakness in Cavium NITROX SSL, Nitrox V SSL, and TurboSSL SDK families, allowing TLS ciphertext decryption; affects SSL/TLS acceleration hardware in appliances/servers. OCTEON SDK has additional tracked CVEs. A Cavium MAC in a scan indicates an infrastructure-class device often in a privileged inline position

[Confirmed] — https://www.cvedetails.com/cve/CVE-2017-17428

Related vendor

Marvell Technology (current owner since 2018) [Confirmed] — https://www.rcrwireless.com/20180709/chips/marvell-completes-cavium-acquisition

Analyst note

a Cavium OUI reliably identifies infrastructure silicon (router/firewall/server/NIC), not a consumer endpoint; treat the host as a high-impact network device when triaging.