Comtrend Corporation — 9 prefixes (MA-L)
Summary
- // what this is
- Comtrend is registered to MAC prefix
00:1D:20and 8 more in the IEEE OUI database. When a device's MAC address begins with00:1D:20, that block was registered by Comtrend — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- A Comtrend OUI reliably identifies genuine Comtrend broadband CPE (residential/SMB gateway, ONT, or router hardware); the firmware CVE history is relevant if this vendor is surfaced alongside device/security context.
About this vendor.
Comtrend Corporation is a Taiwan-headquartered broadband customer-premises-equipment (CPE) manufacturer holding nine separate IEEE MA-L (24-bit) OUI blocks, all registered to the same New Taipei City address — a pattern consistent with a genuine, high-volume equipment vendor rather than a one-off registrant. Comtrend's public product catalog spans DSL and VDSL2 modem-routers, G.fast gateways, XGS-PON fiber ONTs, Wi-Fi routers and mesh systems, and powerline/coax LAN adapters, sold to internet service providers and telcos under its own brand and via carrier-branded models (e.g. a MasMovil-branded router). The company states a 30+ year operating history and over one million CPE units deployed. Comtrend's firmware also has a real, documented public vulnerability history — including authenticated command-injection flaws in diagnostic pages (CVE-2020-10173, CVE-2024-5785) and a companion CSRF issue (CVE-2024-5786) — which corroborates that these are actively deployed, internet-facing consumer/SMB gateways rather than obscure hardware, and is useful context for anyone identifying Comtrend devices on a network by MAC prefix.
- IEEE assignments
- 9 MA-L prefixes registered to "Comtrend Corporation" — 00:1D:20, 00:30:DA, 1C:64:99, 38:72:C0, 64:68:0C, A0:18:42, C8:D1:2A, D8:B6:B7, F8:8E:85 [Confirmed] — the IEEE MA-L registry
- Cross-check
- same 9 prefixes independently listed as Comtrend / Comtrend Corporation in the Wireshark
the Wireshark manufacturer databasefile [Confirmed] — the Wireshark manufacturer database - Registry / block size
- MA-L (24-bit OUI) for all 9 assignments; no MA-M/MA-S entries found for this org in the IEEE MA-M registry or the IEEE MA-S registry [Confirmed] — the IEEE MA-L registry
- Registered address
- 3F-1, 10 Lane 609, Chongxin Road, Section 5, New Taipei City, Taiwan TW 24159 [Confirmed] — the IEEE MA-L registry
- Commercial presence
- active corporate site with a U.S. commercial arm (Irvine, CA) alongside Taiwan HQ/manufacturing [Likely — single web source] — https://us.comtrend.com/
- Company status
- active, currently shipping product [Confirmed] — https://us.comtrend.com/all-products/
- Device types
- DSL/VDSL2/G.fast gateways, XGS-PON fiber ONTs, Wi-Fi routers/mesh, powerline/coax LAN adapters [Confirmed] — https://us.comtrend.com/all-products/
- Notable products
- VR-3030, AR-5230, NL-3240 (bonded VDSL2 wireless router), GFR-9510 (G.fast gateway) [Confirmed] — https://us.comtrend.com/vr-3030/ , https://us.comtrend.com/ar-5230/
- Security context
- CVE-2020-10173 (VR-3033, authenticated command injection via ping/traceroute); CVE-2024-5785 (GRG-4280us/WLD71-T1, CVSS 8.0, authenticated command injection); CVE-2024-5786 (same model, CSRF, CVSS 6.5) [Confirmed] — https://www.sentinelone.com/vulnerability-database/cve-2020-10173/ , https://github.com/advisories/GHSA-9mrw-6xpv-33mx , https://github.com/advisories/GHSA-mx85-w6rx-pfvf
- Registration date
- Unknown / not applicable — IEEE's public MA-L registry (the IEEE MA-L registry) publishes no per-assignment registration date; any "date registered" shown by third-party lookup aggregators is a database artifact, not an IEEE fact, and is not recorded here [Confirmed]
- Masters status
- no existing row in this site's own enrichment records*.csv for vendor-comtrend as of this cycle; slug is queued (position 10) in this site's own enrichment records [Confirmed] — this site's own enrichment records