Genetec Inc. — 2 MA-L blocks + 1 MA-S sub-block

A MAC address beginning with 00:BF:15 or 0C:BF:15 belongs to Genetec Inc., a Montreal-area physical-security software and hardware vendor. Devices carrying these prefixes are typically Cloudlink edge appliances, StreamVault recording servers, or other networked hardware tied to Genetec's Security Center video-management and access-control platform.

Genetec holds two confirmed IEEE MA-L (24-bit) blocks registered to the same address — 2280 boul. Alfred-Nobel, Saint-Laurent, Quebec, Canada — plus a confirmed MA-S sub-block (00:50:C2:BE:70/36) under the shared IEEE base 00:50:C2. That sub-block is absent from the vendored the IEEE MA-S registry for a structural reason, not a doubtful one: 00:50:C2 is the legacy IAB base, the vendored IEEE CSVs carry no 00:50:C2 assignments at all, and there is no iab.csv in the registry cache — the sub-allocation is instead recorded in the Wireshark manufacturer database registry. The shared base 00:50:C2 itself is registered to the IEEE Registration Authority and must never be attributed to Genetec as a whole block.

The company was founded in 1997 and is headquartered in the Saint-Laurent borough of Montreal (Likely, third-party directories; not independently confirmed on genetec.com). It remains active, with a flagship Security Center product line spanning video management, access control, and automatic license-plate recognition (AutoVu), and it operates its own CVE Numbering Authority program.

Security Center has drawn multiple notable CVEs, including CVE-2025-43027 (critical, CVSS 9.8, improper access control in the ALPR Manager role, enabled by default since v5.11.0.0) and CVE-2024-7059 (high, arbitrary code execution on the Web SDK role host). Hardware in these OUI blocks is plausibly physical-security infrastructure — worth flagging as high-value if seen unexpectedly on a network.

Two similarly-named but unrelated registrants exist in the same IEEE dataset and must not be conflated with this entry: 00:0A:B1 "GENETEC Corporation" (Tokyo, Japan) and D8:C0:68 "Netgenetech.co.,ltd." (South Korea) — both are separate companies with no verified connection to Genetec Inc.

IEEE assignment

00:BF:15, 0C:BF:15 → Genetec Inc., registered Saint-Laurent, Quebec, Canada [Confirmed] — IEEE MA-L

Additional sub-block

00:50:C2:BE:70/36 (MA-S, registrant-specific sub-allocation under the IEEE-held base 00:50:C2) [Confirmed] — the Wireshark manufacturer database. Not present in the IEEE MA-S registry because 00:50:C2 is the legacy IAB base and the vendored IEEE CSVs carry no 00:50:C2 assignments; the base itself is registered to the IEEE Registration Authority (the IEEE MA-L registry).

Registry / block size

2× MA-L (24-bit OUI) + 1× MA-S (36-bit sub-block) [Confirmed]

HQ / country

2280 boul. Alfred-Nobel, Saint-Laurent, Quebec, Canada H4S 2A4 [Confirmed] — IEEE MA-L registry address

Company status

active — ongoing CVE disclosures through 2025, own CNA program [Confirmed] — resources.genetec.com

Founded / HQ city

1997; Montreal (Saint-Laurent borough), Quebec [Likely] — internationalsecurityjournal.com, sourcesecurity.com

Device types

Cloudlink 210/310/2210 appliances, StreamVault recording servers; Security Center software (VMS, access control, AutoVu ALPR) [Confirmed] — techdocs.genetec.com, resources.genetec.com datasheets

Registration date

not published — IEEE the IEEE MA-L registry/manuf carry no date field for any of the three prefixes; a third-party "date registered" value would be a database artifact, not an IEEE fact [Confirmed]

IANA reference

not applicable — OUI registration is IEEE-administered, not IANA [Confirmed]

Security context

CVE-2025-43027 (critical, CVSS 9.8, ALPR Manager improper access control, default-enabled since v5.11.0.0); CVE-2024-7059 (high, Web SDK role RCE) [Confirmed] — rapid7.com, resources.genetec.com

Disambiguation

00:0A:B1 "GENETEC Corporation" (Tokyo, Japan) and D8:C0:68 "Netgenetech.co.,ltd." (South Korea) are unrelated registrants, name coincidence only [Confirmed] — IEEE the IEEE MA-L registry

Website

https://www.genetec.com [Confirmed]

Analyst note

multiple independent OUI/sub-block assignments, an identifiable active company with a named flagship product, real networked hardware, and an external CVE/security-research trail together clear the bar for a substantive vendor entry, not a bare single-OUI shell [Confirmed]