MAC address vendor

FLIR Systems — 3 prefixes (MA-L)

Primary prefix
00:1B:D8
Block
MA-L
Status
Active

Summary

// what this is
FLIR Systems is registered to MAC prefix 00:1B:D8 and 2 more in the IEEE OUI database. When a device's MAC address begins with 00:1B:D8, that block was registered by FLIR Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
Three independently-verified MA-L blocks across three real facilities (Ridgefield Park NJ, Oak Ridge TN, Sweden) indicate a substantive, multi-site company rather than a shell registration. Networked FLIR thermal cameras have a documented CVE history, so an asset presenting one of these OUIs is worth checking against current firmware.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High  ·  19 sources  ·  How this page is checked

A MAC address beginning 00:1B:D8 identifies FLIR Systems Inc, the thermal-imaging and infrared-camera company now operating as Teledyne FLIR, and typically appears on networked thermal or machine-vision cameras such as the FLIR A615 or AX8.

FLIR Systems was founded in 1978 in Wilsonville, Oregon, and became the market leader in infrared imaging cameras and sensors. Teledyne Technologies completed an approximately $8 billion acquisition of FLIR in July 2021; the combined unit now operates as Teledyne FLIR with 3,000+ employees, still selling thermal cameras, machine-vision cameras, and radiation-detection instruments under the FLIR brand.

Two further MA-L blocks belong to the same corporate family. 00:13:56 is registered to FLIR Radiation Inc at 100 Midland Rd, Oak Ridge, TN — the division behind FLIR's identiFINDER personal and backpack radiation detectors. 00:40:7F is registered to FLIR Systems at an incomplete Swedish address ("BOX 3, SE"), likely the former Agema Infrared Systems AB, the Swedish company FLIR acquired in 1998 that built the first commercial infrared scanner in 1965.

These OUIs correspond to real deployed hardware rather than paper registrations. FLIR's own support documentation describes a MAC-address-based discovery workflow — the "FLIR IP Config" utility enumerates networked cameras by MAC address to assign or reset IP settings — which confirms the blocks are burned into shipping network interfaces.

Networked FLIR thermal cameras carry a documented CVE history worth checking against current firmware: CVE-2017-20216 is a critical (CVSS 9.8) unauthenticated remote command-injection flaw in PT-Series firmware 8.0.0.64; CVE-2017-20214 and CVE-2017-20215 cover hardcoded SSH credentials and an authenticated root-level command injection on the same firmware family; and CVE-2023-51127 is a directory-traversal flaw in AX8 firmware up to 1.46.16, fixed in 1.49.16. No CVE was found specific to the identiFINDER radiation-detection line as of an August 2026 search.

A common mix-up: Flirtey Inc, a drone-delivery startup, holds an unrelated OUI-36 registration under the shared IEEE base 70:B3:D5 — a base sub-allocated to thousands of unrelated registrants, none of which include FLIR Systems. Flirtey should never be cited as evidence for, or merged with, this entry.

Device class
Networked thermal-imaging, machine-vision, and radiation/CBRNE-detection hardware
Primary prefix
00:1B:D8 — FLIR Systems Inc, Ridgefield Park, NJ, US
Also assigned
00:13:56 (FLIR Radiation Inc, Oak Ridge, TN) and 00:40:7F (FLIR Systems, Sweden)
Parent company
Teledyne Technologies, since the ~$8B acquisition completed July 2021 (per teledyne.com, geekwire.com)
Not to be confused with
Flirtey Inc, an unrelated drone-delivery company sharing only a superficial name resemblance
Security history
Four CVEs recorded against FLIR camera firmware (CVE-2017-20216, -20214, -20215, CVE-2023-51127) per nvd.nist.gov
IEEE assignment
00:1B:D8 → FLIR Systems Inc, 65 Challenger Road, Ridgefield Park, NJ 07660-2103, US [Confirmed] — the IEEE MA-L registry 001BD8
IEEE assignment
00:13:56 → FLIR Radiation Inc, 100 Midland Rd, Oak Ridge, TN 37830, US (radiation/CBRNE-detection division) [Confirmed] — the IEEE MA-L registry 001356
IEEE assignment
00:40:7F → FLIR Systems, address given only as "BOX 3, SE" [Confirmed assignment; Swedish-entity identification Likely] — the IEEE MA-L registry 00407F
Registry / block size
MA-L (24-bit OUI); 3 confirmed FLIR-family blocks; no MA-M or MA-S (OUI-36) blocks found under any FLIR name form [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
HQ / country
Historic HQ Wilsonville, OR, US; registry addresses in Ridgefield Park, NJ and Oak Ridge, TN, US, plus one Sweden-registered block [Confirmed] — flir.com/about/company-history
Company status
active, operating as Teledyne FLIR LLC, subsidiary of Teledyne Technologies since the acquisition completed July 2021 [Confirmed] — teledyne.com, geekwire.com, SEC filing
Device types
thermal-imaging and machine-vision cameras (GigE Vision, FLIR A615, AX8), radiation/CBRNE detection instruments (identiFINDER series) [Confirmed] — flir.com product pages
Verified sample prefixes
00:1B:D8, 00:13:56, 00:40:7F [Confirmed] — the IEEE MA-L registry
Lookalike caveat
Flirtey Inc (unrelated drone-delivery company) holds an OUI-36 block under the shared IEEE base 70:B3:D5; must not be conflated with FLIR Systems [Confirmed] — the IEEE MA-S registry 70B3D52AA
Device corroboration
FLIR's "FLIR IP Config" utility performs MAC-address-based discovery/configuration of networked cameras [Confirmed] — flir.com support center
Security history
CVE-2017-20216 (critical unauthenticated RCE, PT-Series firmware 8.0.0.64), CVE-2017-20214 (hardcoded SSH credentials), CVE-2017-20215 (authenticated root command injection), CVE-2023-51127 (directory traversal, AX8 firmware ≤1.46.16) [Confirmed] — nvd.nist.gov
Registration dates
not published by IEEE for any of the three blocks; treated as Unknown [Confirmed negative] — the IEEE MA-L registry (no date column)
Related vendors
Teledyne Technologies (parent, since 2021); FLIR Radiation Inc (subsidiary, Oak Ridge TN division) [Confirmed] — teledyne.com
Analyst note
three independently-verified MA-L blocks across three real facilities indicate a substantive, multi-site company rather than a shell registration; the device class has a documented CVE history worth checking against current firmware [Confirmed] — nvd.nist.gov, flir.com
[ 02 ] — OUI prefixes

Assignments by IEEE.

3
// registered prefixes3
  1. 00:1B:D8MA-L
  2. 00:13:56MA-L
  3. 00:40:7FMA-L
[ 03 ] — Related

Keep digging.