MAC address vendor

devolo AG — 6 prefixes (MA-L)

Primary prefix
00:0B:3B
Block
MA-L
Status
Active

Summary

// what this is
devolo is registered to MAC prefix 00:0B:3B and 5 more in the IEEE OUI database. When a device's MAC address begins with 00:0B:3B, that block was registered by devolo — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
A devolo OUI reliably identifies devolo-manufactured or devolo-OEM hardware (PLC/hybrid extenders, or OEM telecom/industrial modules); no known MAC-randomization caveat applies to this class of device.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High

A MAC address beginning with one of six devolo AG prefixes (00:0B:3B, 30:D3:2D, 88:FC:A6, B8:BE:F4, BC:F2:AF, F4:06:8D) belongs to devolo AG, a German networking-hardware maker, and is typically seen on powerline (PLC) networking adapters or hybrid PLC/Wi-Fi extenders.

devolo AG, founded 2002 and headquartered in Aachen, Germany, is described as a global market leader in powerline communications (PLC). All six of its IEEE-registered OUI blocks are MA-L (the large /24 block, ~16.7M addresses each) and share the same registrant address, indicating a single consolidated organization rather than several unrelated registrants.

Its consumer product lines are the dLAN series (HomePlug AV, later G.hn-standard PLC adapters) and the Magic series (hybrid PLC/Wi-Fi mesh extenders). devolo also supplies OEM modules to telecom carriers and industrial/smart-grid communications equipment makers, so these prefixes can also surface on carrier-branded or industrial gear built on devolo silicon.

devolo runs a public security-advisory program (dSA-numbered bulletins via devolo.com support). Independent researchers have also published findings over the years: insecure WPS defaults and Wi-Fi-stack vulnerabilities on Magic/dLAN devices, an academic firmware-security analysis of devolo HomePlug hardware, and CSRF/remote-code-execution exploits against the dLAN 550 duo+ Starter Kit's web admin UI — a typical advisory footprint for an active consumer networking vendor, not an outlier red flag.

IEEE assignment
6 MA-L prefixes → devolo AG, Charlottenburger Allee 67, Aachen, NRW, DE 52068 [Confirmed] — the IEEE MA-L registry
Registry / block size
MA-L (24-bit OUI) x6; no MA-M or MA-S assignments found in cached registries [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
Company status
active; founded 2002, Aachen, Germany [Confirmed] — https://en.wikipedia.org/wiki/Devolo, https://www.devolo.co.uk/en/about-devolo/portrait
Device types
powerline (PLC) adapters (dLAN), hybrid PLC/Wi-Fi extenders (Magic), OEM telecom/industrial smart-grid modules [Confirmed] — https://en.wikipedia.org/wiki/Devolo, https://www.devolo.co.uk/en/about-devolo/portrait
Security context
public dSA advisory program plus multiple independent published findings (WPS/Wi-Fi-stack CVEs, academic firmware analysis, CSRF/RCE exploits on dLAN 550 duo+, insecure Android app storage) [Confirmed] — https://www.cvedetails.com/vulnerability-list/vendor_id-996/Magic.html, https://www.mlsec.org/docs/2019-eurosec.pdf, https://github.com/intellisec/devolo, https://www.exploit-db.com/exploits/46324, https://www.exploit-db.com/exploits/46325, https://sec-consult.com/vulnerability-lab/advisory/insecure-data-storage/
Date registered
Unknown — IEEE OUI registry publishes no assignment/registration dates; not recorded in the IEEE MA-L registry [Confirmed]
IANA reference
not applicable / blank — no IANA Reference data for OUI/MAC vendor entries [Confirmed]
[ 02 ] — OUI prefixes

Assignments by IEEE.

6
// registered prefixes6
  1. 00:0B:3BMA-L
  2. 30:D3:2DMA-L
  3. 88:FC:A6MA-L
  4. B8:BE:F4MA-L
  5. BC:F2:AFMA-L
  6. F4:06:8DMA-L
[ 03 ] — Related

Keep digging.