EFM Networks — 8 prefixes (MA-L)

EFM Networks Co., Ltd. is a South Korean networking-equipment company that holds eight IEEE MA-L (24-bit OUI) blocks, all registered to the organization name "EFM Networks" at addresses in Gyeonggi-do (Kyunggi-do), Korea. The company is best known domestically for the "ipTIME" brand of consumer and SOHO network hardware — wired and wireless routers, mesh Wi-Fi systems, Wi-Fi range extenders, network hubs, and NAS storage devices — which reportedly holds a leading share of the South Korean home-router market. Because the eight prefixes share a single organization and overlapping registered addresses, consolidating them into one vendor entry is more useful than eight near-identical per-prefix pages. Seven of the eight blocks carry the registry address "6F, Benposra II 1197-1 Bojeong Giheung Gu Yong In Kyunggi do KR 446913" (one, B0:38:6C, in the newer Korean road-address format for the same building); the eighth, 00:08:9F, carries an older Sungnam-si address. For asset classification, an EFM Networks OUI on a home or SOHO network most likely identifies an ipTIME router or NAS. That product line also carries an active vulnerability history — including CVE-2025-55423, a pre-authentication OS command-injection in the UPnP handler reported to affect 163 ipTIME router models — so an ipTIME device on a network warrants firmware-currency verification, the same CPE-triage posture applied to other consumer-router vendors in this dataset.

IEEE assignment

8 prefixes → "EFM Networks", registered Gyeonggi-do (Kyunggi-do), KR [Confirmed] — IEEE MA-L (local the IEEE MA-L registry, 8 matching rows)

Registry / block size

MA-L (24-bit OUI) for all 8 blocks; no MA-M or MA-S entries exist for this org (the IEEE MA-M registry / the IEEE MA-S registry checked, zero matches) [Confirmed] — IEEE registry files (the IEEE MA-L registry / the IEEE MA-M registry / the IEEE MA-S registry). NOTE: IEEE's public OUI data publishes NO assignment/registration date (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party MAC-lookup tools is a database artifact, not an IEEE fact.

Verified prefixes (all MA-L, "EFM Networks")

64:E5:99, 88:36:6C, 00:08:9F, 58:86:94, 90:9F:33, 70:5D:CC, 00:26:66, B0:38:6C [Confirmed] — IEEE MA-L

HQ / country

Giheung-gu, Yongin-si, Gyeonggi-do (Kyunggi-do), KR — registry address "6F, Benposra II 1197-1 Bojeong Giheung Gu Yong In Kyunggi do KR 446913" (7 of 8 blocks; B0:38:6C in newer road-address format, same building). 00:08:9F carries an older address "403, 4th floor Elegance 1 Bldg. Sungnam-si Kyunggi-do KR 463-808". No single canonical address across all blocks.

[Confirmed] — IEEE MA-L

Company identity

EFM Networks Co., Ltd., South Korean network-equipment company; registry address matches its Giheung-gu HQ [Likely] — https://www.southkoreayp.com/company/76464/EFM_NETWORKS_CO_LTD , http://www.iptime.co.kr

Founding year

Unknown — sources conflict (business directory states 2001; NamuWiki dates the ipTIME line to 2004 with the PRO54G). Not resolved. [Unknown] — https://www.southkoreayp.com/company/76464/EFM_NETWORKS_CO_LTD , https://en.namu.wiki/w/ipTIME

Company status

active [Likely] — http://www.iptime.co.kr

Device types

consumer/SOHO wired & wireless routers, mesh Wi-Fi systems, Wi-Fi range extenders, network hubs/switches, NAS storage — all under the "ipTIME" brand [Likely] — https://en.namu.wiki/w/ipTIME , https://www.genians.com/platform/EFM-Networks_ipTIME_N104E_Wireless_Router/

Notable products

ipTIME-brand routers and NAS (e.g. ipTIME N104E)

Market position

reported leading share of the South Korean home-router market [Likely] — https://en.namu.wiki/w/EFM%20%EB%84%A4%ED%8A%B8%EC%9B%8D%EC%8A%A4

Security context

ipTIME firmware has an active vulnerability history — CVE-2025-55423 (pre-auth OS command injection in UPnP upnp_relay(), reported to affect 163 ipTIME models, unauth RCE as the web-service process); additional GitHub-reported auth-bypass / arbitrary-file-upload / debug-backdoor issues in specific models (A8004T, A6004MX) not yet CVE-confirmed. Treat an ipTIME/EFM Networks OUI as an elevated-risk consumer router requiring firmware-currency verification. [Likely] — https://nvd.nist.gov/vuln/detail/CVE-2025-55423 , https://www.sentinelone.com/vulnerability-database/cve-2025-55423/ , https://www.cvedetails.com/vulnerability-list/vendor_id-24535/Iptime.html

Assignment dates

Unknown / not applicable — IEEE publishes no OUI assignment dates; none fabricated. [Confirmed] — the IEEE MA-L registry (no date column)

Analyst note

An EFM Networks OUI on a globally-administered address most likely identifies genuine ipTIME hardware; given the CVE history, flag such devices for firmware review during CPE triage.