corega K.K. — 2 prefixes (MA-L)
Summary
- // what this is
- corega is registered to MAC prefix
00:0A:79and 1 more in the IEEE OUI database. When a device's MAC address begins with00:0A:79, that block was registered by corega — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- corega K.K. OUIs 00:0A:79 and 00:26:87 reliably identify corega-era consumer/SMB networking hardware (mostly Japan-market routers and wireless gear); several named router models carry HIGH-severity firmware CVEs reflecting end-of-life risk, not a malware/botnet association.
About this vendor.
A MAC address starting with 00:0A:79 or 00:26:87 belongs to corega K.K., a Japanese consumer and SMB networking-hardware brand, and is typically seen on home or small-office routers, switches, or wireless adapters rather than enterprise gear.
corega K.K. was founded in 1996 and based in Shinyokohama, Yokohama-city, Kanagawa, Japan — the same address on both IEEE registry rows. By 2002 it was reportedly Japan's largest consumer-networking brand, selling through more than 6,000 retail outlets while outsourcing manufacturing (fabless), which explains why it needed two separate MA-L blocks rather than one. Allied Telesis K.K. acquired the Corega business in 2009 and continues to run it as a product-line brand under its own domain.
Device type is corroborated independently of the registry through NVD CVE records naming specific Corega router models — CG-WGR1200, CG-WLBARGMH, CG-WLBARGNL, and CG-WLR300NX — all consumer or SMB wireless/wired broadband routers. Several of these carry HIGH-severity (CVSSv3 8.8) firmware bugs (CSRF, buffer overflow) reported via JPCERT/CC, reflecting typical end-of-life consumer-router risk rather than any malware or botnet association.
A separate, similarly named registry row exists for "Corega of America" (registered in Bothell, Washington) but it is a distinct organization name and is out of scope for this corega-K.K. entry. IEEE's public OUI data publishes no assignment or registration date for either 00:0A:79 or 00:26:87; no date is asserted here.
- IEEE assignments
- 00:0A:79, 00:26:87 → corega K.K, registered Shinyokohama, Yokohama-city, Kanagawa-ken, JP 222-0033 [Confirmed] — the IEEE MA-L registry 000A79, the IEEE MA-L registry 002687
- Registry / block size
- MA-L (24-bit OUI); 2 dedicated blocks registered to the identical organization name/address [Confirmed] — the IEEE MA-L registry
- HQ / country
- 1-19-20, Shinyokohama, Yokohama-city, Kanagawa-ken, JP 222-0033 [Confirmed] — the IEEE MA-L registry 000A79
- Company status
- historical Japanese consumer-networking brand; acquired by Allied Telesis K.K. in 2009, now operated as a product line [Likely] — https://en.wikipedia.org/wiki/Corega, https://www.allied-telesis.co.jp/products/list/corega/discontinued-products/index.html
- Device types
- consumer/SMB routers, switches, wireless access points and adapters [Likely] — https://en.wikipedia.org/wiki/Corega, https://www.businesswire.com/news/home/20030623005081/en/Corega-Selects-Intersils-PRISM-GT-Chip-Set
- Notable products
- CG-WGR1200, CG-WLBARGMH, CG-WLBARGNL, CG-WLR300NX (named in NVD CVE records) [Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2017-10852, https://nvd.nist.gov/vuln/detail/CVE-2017-10853, https://nvd.nist.gov/vuln/detail/CVE-2016-1158, https://nvd.nist.gov/vuln/detail/CVE-2016-7809
- Verified sample prefixes (both MA-L, corega K.K)
- 00:0A:79, 00:26:87 [Confirmed] — the IEEE MA-L registry
- Related-but-distinct registration
- 00:04:1D → "Corega of America", Bothell, WA, US — separate organization-name row, out of scope for this entry [Confirmed] — the IEEE MA-L registry 00041D
- Security context
- multiple HIGH-severity (CVSSv3 8.8) firmware CVEs on named Corega router models (CSRF, buffer overflow), all JPCERT/CC-sourced via NVD; reflects end-of-life consumer-router firmware risk, not a malware/botnet association [Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2017-10852, https://nvd.nist.gov/vuln/detail/CVE-2017-10853, https://nvd.nist.gov/vuln/detail/CVE-2016-1158, https://nvd.nist.gov/vuln/detail/CVE-2016-7809
- Malware/trojan check
- no malware or trojan association found for corega K.K. or Corega-branded hardware as of an August 2026 search [Likely] — general web and NVD search; no dedicated malware-list site applies here (not a port entry)
- Registration date
- Unknown — IEEE the IEEE MA-L registry publishes no assignment/registration date for MA-L blocks; any third-party "date registered" is a database artifact, not an IEEE fact [Confirmed] — the IEEE MA-L registry
- Analyst note
- corega K.K. held two dedicated MA-L blocks for a documented, decade-plus Japanese consumer-networking brand later absorbed into Allied Telesis; OUI prefixes 00:0A:79 and 00:26:87 reliably identify corega-era hardware, mostly home/SMB routers and wireless gear, some of which carries unpatched firmware CVEs[Likely] — sources above