Freebox SAS — 13 prefixes (MA-L)

Freebox SAS is the French simplified joint-stock company (SAS) that designs and builds the Freebox line of residential broadband gateways and set-top boxes, registered to "FREEBOX SAS" at 16 rue de la Ville l'Évêque, 75008 Paris, France (older OUI blocks carry the variant "8 rue de la Ville l'Eveque" address). It is a wholly-owned subsidiary of the Iliad Group — the parent of French ISP Free — under SIREN 433910619, with Xavier Niel as president. Across the IEEE registry the company holds 13 MA-L (24-bit OUI) blocks, all large-block assignments; none appear in the MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) registries. These prefixes front the consumer customer-premises equipment Free ships to subscribers: combo ADSL/VDSL/FTTH modem-router-gateways (Freebox Ultra, Pop, Pop S, Révolution Light, Box 5G) and IPTV players (Freebox Player), delivering triple-play broadband, VoIP, and television. Recent hardware reaches Wi-Fi 7 and 2.5GbE, with GPON/EPON SFP optics; the Freebox Révolution enclosure was styled by designer Philippe Starck. For OUI work the standard MAC caveat applies: IEEE publishes no per-prefix registration dates, so any "date registered" shown by third-party MAC-lookup databases (e.g. "2001-10-24" against 00:07:CB) is a database artifact scraped from the public OUI file, not an IEEE fact — no allocation date is recorded here. Security-wise, the most clearly sourced issue is CVE-2020-24375, a DNS-rebinding flaw in the Freebox Server UPnP MediaServer fixed in 4.2.3; hardware-level research also exists for the Freebox Pop / IliadBox (Broadcom BCM63153, EL3 privilege-escalation work).

IEEE assignment

13 prefixes → FREEBOX SAS, registered Paris, IdF, FR [Confirmed] — IEEE MA-L (regauth.standards.ieee.org)

Registry / block size

MA-L (24-bit OUI); holds 13 IEEE prefixes; none in MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) [Confirmed] — IEEE the IEEE MA-L registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

16 rue de la Ville l'Évêque, 75008 Paris, FR (older blocks 00:07:CB, F4:CA:E5, 00:24:D4 list the variant "8 rue de la Ville l'Eveque, Paris, FR 75008") [Confirmed] — IEEE MA-L

Company status / identity

active French SAS; wholly-owned Iliad Group subsidiary (parent of ISP Free); SIREN 433910619; president Xavier Niel; turnover ~€371M (2024) [Confirmed] — annuaire-entreprises.data.gouv.fr/entreprise/freebox-433910619, societe.com

Device types

residential CPE — ADSL/VDSL/FTTH combo modem-router-gateways (Freebox Ultra, Pop, Pop S, Révolution Light, Box 5G) and IPTV set-top boxes (Freebox Player); triple-play broadband, VoIP, IPTV; Wi-Fi 7 / 2.5GbE on recent models; GPON/EPON SFP optics

[Confirmed] — en.wikipedia.org/wiki/Freebox, free.fr/freebox

Notable products

Freebox line; Révolution (V6) enclosure designed by Philippe Starck; Italian variant marketed as IliadBox [Confirmed] — en.wikipedia.org/wiki/Freebox, hack-gpon.org

Verified prefixes (all MA-L, FREEBOX SAS)

00:07:CB, 00:24:D4, 14:0C:76, 20:66:CF, 34:27:92, 38:07:16, 68:A3:78, 70:FC:8F, 8C:69:14, 8C:97:EA, DC:00:B0, E4:9E:12, F4:CA:E5 [Confirmed] — IEEE the IEEE MA-L registry / maclookup.app/vendors/freebox-sas

Allocated date

Unknown — IEEE publishes no registration dates for MAC/OUI prefixes; this is not an RIR/RDAP entity, so no first-party registry date applies. Third-party DB dates are artifacts, not recorded. [Unknown] — IEEE the IEEE MA-L registry (no date column)

Security context

CVE-2020-24375 (CVSS 6.5, Medium) — DNS-rebinding in the UPnP MediaServer of Freebox Server before 4.2.3 (also Freebox V5). Freebox OS tracked under a separate CVEDetails vendor entry. Hardware research on Freebox Pop / IliadBox (BCM63153) documents EL3 privilege escalation; IliadBox config requires trusting a self-signed Iliad ECC Root CA.

[Confirmed] — opencve.io (freebox_server), cvedetails.com vendor_id-21344, hack-gpon.org

Website

https://www.free.fr/freebox/ (product page; no standalone freebox-sas.fr domain found) [Confirmed] — free.fr/freebox

Analyst note

A globally-administered Freebox SAS OUI reliably identifies genuine Freebox CPE for asset classification; these are LAN-side consumer gateways, so the typical risk surface is on-network users and ISP management interfaces rather than internet-facing services.