FLIR Systems — 3 prefixes (MA-L)
Summary
- // what this is
- FLIR Systems is registered to MAC prefix
00:1B:D8and 2 more in the IEEE OUI database. When a device's MAC address begins with00:1B:D8, that block was registered by FLIR Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Three independently-verified MA-L blocks across three real facilities (Ridgefield Park NJ, Oak Ridge TN, Sweden) indicate a substantive, multi-site company rather than a shell registration. Networked FLIR thermal cameras have a documented CVE history, so an asset presenting one of these OUIs is worth checking against current firmware.
About this vendor.
A MAC address beginning 00:1B:D8 identifies FLIR Systems Inc, the thermal-imaging and infrared-camera company now operating as Teledyne FLIR, and typically appears on networked thermal or machine-vision cameras such as the FLIR A615 or AX8.
FLIR Systems was founded in 1978 in Wilsonville, Oregon, and became the market leader in infrared imaging cameras and sensors. Teledyne Technologies completed an approximately $8 billion acquisition of FLIR in July 2021; the combined unit now operates as Teledyne FLIR with 3,000+ employees, still selling thermal cameras, machine-vision cameras, and radiation-detection instruments under the FLIR brand.
Two further MA-L blocks belong to the same corporate family. 00:13:56 is registered to FLIR Radiation Inc at 100 Midland Rd, Oak Ridge, TN — the division behind FLIR's identiFINDER personal and backpack radiation detectors. 00:40:7F is registered to FLIR Systems at an incomplete Swedish address ("BOX 3, SE"), likely the former Agema Infrared Systems AB, the Swedish company FLIR acquired in 1998 that built the first commercial infrared scanner in 1965.
These OUIs correspond to real deployed hardware rather than paper registrations. FLIR's own support documentation describes a MAC-address-based discovery workflow — the "FLIR IP Config" utility enumerates networked cameras by MAC address to assign or reset IP settings — which confirms the blocks are burned into shipping network interfaces.
Networked FLIR thermal cameras carry a documented CVE history worth checking against current firmware: CVE-2017-20216 is a critical (CVSS 9.8) unauthenticated remote command-injection flaw in PT-Series firmware 8.0.0.64; CVE-2017-20214 and CVE-2017-20215 cover hardcoded SSH credentials and an authenticated root-level command injection on the same firmware family; and CVE-2023-51127 is a directory-traversal flaw in AX8 firmware up to 1.46.16, fixed in 1.49.16. No CVE was found specific to the identiFINDER radiation-detection line as of an August 2026 search.
A common mix-up: Flirtey Inc, a drone-delivery startup, holds an unrelated OUI-36 registration under the shared IEEE base 70:B3:D5 — a base sub-allocated to thousands of unrelated registrants, none of which include FLIR Systems. Flirtey should never be cited as evidence for, or merged with, this entry.
- Device class
- Networked thermal-imaging, machine-vision, and radiation/CBRNE-detection hardware
- Primary prefix
- 00:1B:D8 — FLIR Systems Inc, Ridgefield Park, NJ, US
- Also assigned
- 00:13:56 (FLIR Radiation Inc, Oak Ridge, TN) and 00:40:7F (FLIR Systems, Sweden)
- Parent company
- Teledyne Technologies, since the ~$8B acquisition completed July 2021 (per teledyne.com, geekwire.com)
- Not to be confused with
- Flirtey Inc, an unrelated drone-delivery company sharing only a superficial name resemblance
- Security history
- Four CVEs recorded against FLIR camera firmware (CVE-2017-20216, -20214, -20215, CVE-2023-51127) per nvd.nist.gov
- IEEE assignment
- 00:1B:D8 → FLIR Systems Inc, 65 Challenger Road, Ridgefield Park, NJ 07660-2103, US [Confirmed] — the IEEE MA-L registry 001BD8
- IEEE assignment
- 00:13:56 → FLIR Radiation Inc, 100 Midland Rd, Oak Ridge, TN 37830, US (radiation/CBRNE-detection division) [Confirmed] — the IEEE MA-L registry 001356
- IEEE assignment
- 00:40:7F → FLIR Systems, address given only as "BOX 3, SE" [Confirmed assignment; Swedish-entity identification Likely] — the IEEE MA-L registry 00407F
- Registry / block size
- MA-L (24-bit OUI); 3 confirmed FLIR-family blocks; no MA-M or MA-S (OUI-36) blocks found under any FLIR name form [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
- HQ / country
- Historic HQ Wilsonville, OR, US; registry addresses in Ridgefield Park, NJ and Oak Ridge, TN, US, plus one Sweden-registered block [Confirmed] — flir.com/about/company-history
- Company status
- active, operating as Teledyne FLIR LLC, subsidiary of Teledyne Technologies since the acquisition completed July 2021 [Confirmed] — teledyne.com, geekwire.com, SEC filing
- Device types
- thermal-imaging and machine-vision cameras (GigE Vision, FLIR A615, AX8), radiation/CBRNE detection instruments (identiFINDER series) [Confirmed] — flir.com product pages
- Verified sample prefixes
- 00:1B:D8, 00:13:56, 00:40:7F [Confirmed] — the IEEE MA-L registry
- Lookalike caveat
- Flirtey Inc (unrelated drone-delivery company) holds an OUI-36 block under the shared IEEE base 70:B3:D5; must not be conflated with FLIR Systems [Confirmed] — the IEEE MA-S registry 70B3D52AA
- Device corroboration
- FLIR's "FLIR IP Config" utility performs MAC-address-based discovery/configuration of networked cameras [Confirmed] — flir.com support center
- Security history
- CVE-2017-20216 (critical unauthenticated RCE, PT-Series firmware 8.0.0.64), CVE-2017-20214 (hardcoded SSH credentials), CVE-2017-20215 (authenticated root command injection), CVE-2023-51127 (directory traversal, AX8 firmware ≤1.46.16) [Confirmed] — nvd.nist.gov
- Registration dates
- not published by IEEE for any of the three blocks; treated as Unknown [Confirmed negative] — the IEEE MA-L registry (no date column)
- Related vendors
- Teledyne Technologies (parent, since 2021); FLIR Radiation Inc (subsidiary, Oak Ridge TN division) [Confirmed] — teledyne.com
- Analyst note
- three independently-verified MA-L blocks across three real facilities indicate a substantive, multi-site company rather than a shell registration; the device class has a documented CVE history worth checking against current firmware [Confirmed] — nvd.nist.gov, flir.com