Guangzhou Yuhong Technology Co., Ltd. holds the IEEE MA-L block A4:89:7E, registered to a Tianhe District address in Guangzhou, Guangdong. The company is a manufacturer of fibre-optic access customer-premises equipment — GPON and EPON Optical Network Units (ONUs), single- and multi-port gateways, and Wi-Fi/VoIP-equipped ONUs — sold primarily to ISPs and network operators rather than at retail. A device presenting a globally-administered A4:89:7E MAC on an access network is therefore most plausibly an ISP-deployed fibre ONU/gateway. No vendor-specific CVEs, threat-intelligence reports, or botnet attributions naming Yuhong were found in open sources; that absence is honest rather than reassuring, because the broader device class it occupies — generic GPON/EPON ONU CPE — is a well-documented target. Mirai, Satori, and Muhstik variants have for years exploited GPON-router flaws CVE-2018-10561 (authentication bypass) and CVE-2018-10562 (command injection) across many small Chinese ONU OEMs whose ISP-flashed firmware is rarely patched. Treat Yuhong's hardware as sitting in that same exposure category at the class level, while noting no device of theirs is explicitly named in any advisory we could find. Note also that IEEE publishes no registration date for MA-L assignments, so no first-party registration date exists for this prefix.
- IEEE assignment
- A4:89:7E → Guangzhou Yuhong Technology Co.,Ltd. [Confirmed] — IEEE oui.csv (MA-L registry; local enrichment/registries/oui.csv line 550)
- Registry / block size
- MA-L (24-bit OUI; ~16.7M addresses) [Confirmed] — IEEE oui.csv. Single match; not present in MA-M (mam.csv) or MA-S (oui36.csv).
- Registered address
- Room 402, No. 11 Software Road, Tianhe District, Guangzhou, Guangdong, CN 510640 [Confirmed] — IEEE oui.csv, corroborated by HKTDC supplier listing
- Country
- CN [Confirmed] — IEEE oui.csv
- Registration date
- Unknown — IEEE publishes NO assignment/registration date for OUI/MAC prefixes (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address); any third-party "date registered" is a database artifact, not an IEEE fact. [Confirmed — null is correct] — IEEE oui.csv schema
- Company status
- active [Likely] — single-source supplier directory; no corporate registry confirmation found — HKTDC supplier store
- Device types
- GPON Terminal, ONU (Optical Network Unit), EPON ONU, single- and multi-port GPON/EPON ONUs, ONU GPON Wi-Fi, gateway devices (fibre-access CPE, some with Wi-Fi and VoIP/POTS ports) [Confirmed] — HKTDC product listing
- Industry
- fibre-optic access network equipment (GPON/EPON CPE for ISPs)
- Certifications
- ISO 9001 (issuer Beijing East Allreach Certification Center Co., Ltd., valid 2024-01-09 to 2027-01-08) [Confirmed] — HKTDC supplier store
- Website
- yuhong-tech.com appears to be a component-distributor/BOM-sourcing site, not the ONU manufacturer's own domain — treat as unverified; the HKTDC supplier listing is the stronger primary source. LinkedIn page exists under the company name. [Likely / partly Unknown] — yuhong-tech.com, linkedin.com
- Security context
- No CVEs, threat-intel reports, or botnet activity attributable specifically to Guangzhou Yuhong devices found in open sources. Class-level risk applies: generic GPON/EPON ONU CPE is targeted by Mirai/Satori/Muhstik via CVE-2018-10561 (auth bypass) and CVE-2018-10562 (command injection); ISP-deployed firmware on small OEM ONUs is rarely patched. Whether Yuhong-branded devices are explicitly named in any advisory: Unknown. [Likely — class-level; vendor-specific Unknown] — threatdown.com, securityaffairs.com, broadcom.com attack-signature DB
- Analyst note
- A globally-administered A4:89:7E MAC most plausibly identifies an ISP-distributed fibre ONU/gateway. Inventory and access-control decisions should account for the absence of vendor-specific patch/advisory visibility and the class-level GPON CPE exposure profile.