Dreame Technology (Suzhou) Limited — 2 prefixes (MA-L)
Summary
- // what this is
- Dreame Technology is registered to MAC prefix
00:AE:F7and 1 more in the IEEE OUI database. When a device's MAC address begins with00:AE:F7, that block was registered by Dreame Technology — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- A globally-administered Dreame OUI identifies a Dreame consumer IoT device; treat as a residential smart-home endpoint and weigh CVE-2025-8393 MITM exposure when one appears on a network under assessment.
About this vendor.
Dreame Technology (Suzhou) Limited is a Chinese consumer-IoT manufacturer, founded around 2017 and headquartered in Suzhou, Jiangsu. Its product line is built almost entirely around Wi-Fi-connected home appliances — robot vacuums, vacuum-mop hybrids, cordless stick vacuums, smart floor scrubbers, robotic lawn mowers, and high-speed hair dryers — paired to the Dreamehome companion app, so a device carrying one of these prefixes is almost always a residential IoT endpoint rather than infrastructure gear. The company holds two MA-L blocks under this exact legal name: 00:AE:F7 and 70:C9:32 (each MA-L = a full 24-bit OUI, ~16.7M addresses). A closely related legal entity, "Dreame Innovation Technology (Suzhou) Co., Ltd.," separately holds a single MA-M block (10:06:48:A) at a different Suzhou address — operationally the same company, a distinct registry filing; this entry canonically maps to the "...Technology (Suzhou) Limited" name. Two practical notes for anyone classifying these devices. First, IEEE publishes no registration dates for MAC/OUI assignments; the "2022-08-06" and "2025-04-18" dates that appear on third-party lookup sites for 70:C9:32 and 00:AE:F7 are database artifacts and must not be presented as IEEE facts. Second, there is a meaningful security caveat: CVE-2025-8393 (CVSS v4 8.5, High) flags improper certificate validation in the Dreamehome and MOVAhome companion apps, letting them accept self-signed certificates and exposing users to man-in-the-middle attacks on untrusted Wi-Fi — relevant context whenever one of these prefixes turns up on a network you're assessing.
- IEEE assignment
- 2 prefixes → Dreame Technology (Suzhou) Limited [Confirmed] — IEEE MA-L, corroborated by maclookup.app / hwaddress.com
- Registry / block size
- MA-L (24-bit OUI), two blocks (~33.5M addresses total) [Confirmed] — IEEE MA-L. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools is a database artifact, not an IEEE fact.
- Verified prefixes (both MA-L, Dreame Technology (Suzhou) Limited)
- 00:AE:F7, 70:C9:32 [Confirmed] — IEEE MA-L / maclookup.app
- HQ / country
- Shangjiwan Headquarter, Building E3 Economic Garden, 2288 Wuzhong Blvd, Suzhou, Jiangsu 215000, CN [Confirmed] — IEEE MA-L registry address / maclookup.app
- Company status
- active [Confirmed] — global.dreametech.com
- Founded
- ~2017 (incorporated; project origins in Suzhou from ~2015) [Likely] — en.wikipedia.org/wiki/Dreame_Technology (single-source)
- Device types
- robot vacuums, vacuum-mop hybrids, cordless stick vacuums, smart floor scrubbers, robotic lawn mowers, high-speed hair dryers — all Wi-Fi/IoT via the Dreamehome app [Confirmed] — en.wikipedia.org/wiki/Dreame_Technology, global.dreametech.com
- Industry
- consumer electronics / smart-home IoT
- Related entity / variant name
- "Dreame Innovation Technology (Suzhou) Co., Ltd." holds one MA-M block 10:06:48:A at No. 1688 Songwei Road, Wuzhong Economic Development Zone, Suzhou, Jiangsu 215100 — separate legal filing, same operational company [Confirmed] — IEEE MA-M, maclookup.app/macaddress/100648a
- Notable investors / ecosystem
- backed by Xiaomi, Shunwei Capital, Yunfeng Capital (early), IDG Capital (Aug 2020), $563M Series C (Oct 2021) — Xiaomi tie is relevant for IoT-ecosystem context [Confirmed] — en.wikipedia.org/wiki/Dreame_Technology
- Security context
- CVE-2025-8393 (CVSS v4 8.5, High) — improper certificate validation (CWE-295) in Dreamehome iOS ≤2.3.4 / Android ≤2.1.8.8 and MOVAhome iOS ≤1.2.3; apps accept self-signed certs, enabling MITM on untrusted Wi-Fi (credentials, session tokens, home-layout data at risk). Disclosed 2025-08-07; vendor did not respond to CISA coordination; no confirmed patch as of disclosure; no known active exploitation. A separate finding reported remote camera activation on the Dreame X50 Ultra.[Confirmed] — windowsforum.com thread, kucera.news
- Third-party date trap
- "2022-08-06" (70:C9:32) and "2025-04-18" (00:AE:F7) are third-party (maclookup.app) database artifacts, NOT IEEE-published dates — do not attribute to IEEE. [Confirmed] — maclookup.app
- IANA reference
- none (not applicable to OUI/MAC vendor entries) [Unknown]
- Official website
- https://global.dreametech.com/ (global consumer site); primary brand domain https://www.dreame.tech [Confirmed] — global.dreametech.com
- Analyst note
- A Dreame OUI on a globally-administered address reliably identifies a Dreame consumer IoT device; treat such devices as residential smart-home endpoints and weigh the CVE-2025-8393 MITM exposure when they appear on a network under assessment.