Crestron Electronics, Inc. — 3 prefixes (MA-L)

Crestron Electronics, Inc. holds three MA-L (24-bit OUI / large) blocks in the IEEE registry — 00:10:7F, C4:42:68, and 94:88:35 — all carrying the same organization name and the registry address 88 Ramland Road, Orangeburg, NJ, US 10962. (Crestron's corporate headquarters today is 15 Volvo Drive, Rockleigh, NJ; the company was founded in 1972 by George Feldstein.) Crestron builds networked AV and building-control hardware: room-automation processors, touch and scheduling panels (TSW/TSS series), AirMedia wireless-presentation appliances (AM-100/101/300), AV-over-IP distribution gear (DM NVX), keypads, and smart-home and building controllers. These are always-on, IP-connected IoT/OT-class devices, so a Crestron OUI on a network reliably flags institutional control infrastructure rather than a general-purpose endpoint — useful context for asset classification on enterprise, campus, government, healthcare, and residential networks. From a defender's standpoint the prefix carries weight: Crestron devices have a multi-year vulnerability history (CISA/ICS-CERT advisories, NVD CVEs) spanning command injection, default credentials, and unauthenticated APIs, and their deployment in sensitive facilities makes them worth segmenting. As with all OUIs, no IEEE registration date exists — the "date registered" values shown on third-party MAC-lookup sites are database artifacts, not IEEE facts, and must never be presented as authoritative allocation dates.

IEEE assignment

3 prefixes → CRESTRON ELECTRONICS, INC., registry address 88 Ramland Road, Orangeburg, NJ, US 10962 [Confirmed] — IEEE MA-L (lines 23564, 39387, 39388)

Registry / block size

MA-L (24-bit OUI); 3 IEEE prefixes. No entries in MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) [Confirmed] — IEEE the IEEE MA-L registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date (columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

Verified prefixes (all MA-L, CRESTRON ELECTRONICS, INC.)

00:10:7F, C4:42:68, 94:88:35 [Confirmed] — IEEE the IEEE MA-L registry / maclookup.app

HQ / country

15 Volvo Drive, Rockleigh, NJ 07647, US (corporate HQ; registry address is 88 Ramland Road, Orangeburg, NJ 10962). Founded 1972 in Cresskill, NJ, by George Feldstein. Global offices on 6 continents. [Confirmed] — crestron.com/contact/our-locations, en.wikipedia.org/wiki/Crestron_Electronics

Company status

active; privately held multinational corporation [Confirmed] — crestron.com, en.wikipedia.org/wiki/Crestron_Electronics

Device types

AV/IT control systems, room-automation processors, touch and scheduling panels (TSW/TSS), AirMedia wireless presentation (AM-100/101/300), AV-over-IP distribution (DM NVX), smart-home and building controllers, network keypads

[Confirmed] — crestron.com/Products/Featured-Solutions/Control-Solutions, crestron.com/about/company-overview-information

Notable products

AirMedia (AM-100/101/300), DM NVX (4K AV-over-IP), TSW/TSS scheduling panels, Crestron Home OS, XiO Cloud fleet management, MC3 3-Series control system [Confirmed] — crestron.com, bzbgear.com/blog/what-are-crestron-control-systems-and-how-do-they-work/

Industry verticals

enterprise/corporate, higher ed and K-12, government and defense (NIAP/JITC certified), healthcare, hospitality, residential smart home, sports/entertainment, MDU [Confirmed] — crestron.com/about/company-overview-information

Possible additional prefixes

00:12:5F and AC:1F:6B appear in some third-party aggregators (e.g. hwaddress.com) but could not be independently corroborated against IEEE-mirroring sources in this pass; not recorded as Crestron here [Likely] — hwaddress.com/company/crestron-electronics-inc/ (uncorroborated)

Security context

ELEVATED. Multi-year CVE history — e.g. CVE-2023-6926, OS command injection in AM-300 AirMedia (CVSS v3.1 8.4 HIGH), CISA advisory ICSA-24-023-02 (2024-01-23), fixed in firmware 1.4499.00023.001; AM-100/101 default credentials; DM-NVX unauthenticated WebSocket password change; CVE-2026-7865 command-injection RCE in TSW-xx70 touchpanels. Crestron runs a PSIRT (trust.crestron.com). CISA recommends isolating these devices from the public internet and minimizing network exposure.

[Confirmed] — cisa.gov/news-events/ics-advisories/icsa-24-023-02, crestron.com/Security, vuldb.com/?vendor.crestron

Analyst note

A Crestron OUI flags networked control/AV infrastructure (IoT/OT class). Given the deployment in sensitive environments and the documented CVE history, treat Crestron MAC prefixes as control-device indicators and apply network segmentation; do not rely on OUI alone for inventory.