Hangzhou Ezviz Software Co.,Ltd. — 14 prefixes (MA-L)

Hangzhou Ezviz Software Co.,Ltd. holds 14 MA-L (24-bit OUI) blocks registered out of Binjiang District, Hangzhou, Zhejiang, China — roughly 235 million addresses across the allocation. EZVIZ is the consumer-facing smart-home brand of Hangzhou Hikvision Digital Technology Co., Ltd. (Hikvision), the world's largest video-surveillance manufacturer, which is itself majority-owned by China Electronics Technology Group (CETC). The OUIs almost exclusively front consumer IoT security hardware: indoor and outdoor Wi-Fi IP cameras (fixed and pan-tilt), battery cameras, video doorbells, smart locks and keypads, PIR sensors, and smart plugs — all tied to the EZVIZ Cloud platform and sold in 130+ countries. Two operational flags matter for anyone seeing these prefixes on a network. First, EZVIZ devices have a materially significant CVE history: Bitdefender disclosed CVE-2022-2471 (a remote-code-execution stack overflow) and CVE-2022-2472 (admin credential takeover) in 2022, followed by CVE-2023-48121 (auth bypass in the Direct Connection Module), CVE-2024-42531 (RTSP auth bypass, vendor-disputed), and a 2026 medium-severity cloud-API data-interception issue in the mobile apps. Second, because EZVIZ is a Hikvision subsidiary, its equipment falls under U.S. NDAA Section 889 federal-procurement restrictions — relevant posture for enterprise and government operators inventorying these OUIs. The registered IEEE address appears in two slight variants across the 14 blocks (12 carry "17th Floor, Building D"; two use the street-only form), consistent with address updates between registration batches. No registration dates are recorded: IEEE publishes none for OUI assignments, and any "date registered" in third-party MAC databases is a database artifact.

IEEE assignment

14 prefixes → Hangzhou Ezviz Software Co.,Ltd., registered Binjiang District, Hangzhou, Zhejiang, CN [Confirmed] — the IEEE MA-L registry (IEEE MA-L)

Registry / block size

MA-L (24-bit OUI); holds 14 IEEE prefixes (~234.9M addresses) [Confirmed] — the IEEE MA-L registry; cross-checked at https://maclookup.app/vendors/hangzhou-ezviz-software-co-ltd. NOTE: IEEE's public OUI data publishes NO assignment/registration date (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

17th Floor, Building D, No.188 Qizhi East Street, Xixing Subdistrict, Binjiang District, Hangzhou, Zhejiang, CN 310051 (registry address; 2 of 14 records use the shorter street-only form) [Confirmed] — the IEEE MA-L registry (IEEE MA-L)

Company status

active [Confirmed] — https://www.ezviz.com/

Device types

consumer IoT / smart-home security — Wi-Fi IP cameras (fixed + pan-tilt), battery cameras, video doorbells, smart locks/keypads, PIR sensors, smart plugs; all EZVIZ Cloud-connected [Confirmed] — https://www.ezviz.com/, https://www.netify.ai/resources/macs/brands/ezvizlife, https://csa-iot.org/member/hangzhou-ezviz-network-co-ltd/

Notable products

EZVIZ Wi-Fi cameras, video doorbells, smart locks

Verified prefixes (all MA-L, Hangzhou Ezviz Software Co.,Ltd.)

64:F2:FB, 94:EC:13, EC:97:E0, F4:70:18, FC:24:22, 78:C1:AE, 58:8F:CF, 78:A6:A0, 54:D6:0D, 20:BB:BC, 64:24:4D, 0C:A6:4C, 34:C6:DD, AC:1C:26 [Confirmed] — the IEEE MA-L registry / https://maclookup.app/vendors/hangzhou-ezviz-software-co-ltd

Parent / corporate structure

subsidiary of Hangzhou Hikvision Digital Technology Co., Ltd. (Hikvision); Hikvision is majority-owned by China Electronics Technology Group (CETC). EZVIZ is Hikvision's consumer/residential brand.

[Confirmed] — https://en.wikipedia.org/wiki/Hikvision, https://ipvm.com/discussions/hikvision-ezviz-cannot-keep-its-lies-straight

Security context

documented CVE history — CVE-2022-2471 (RCE stack overflow) + CVE-2022-2472 (admin credential takeover), Bitdefender 2022; CVE-2023-48121 (auth bypass, Direct Connection Module); CVE-2024-42531 (RTSP auth bypass, vendor-disputed); CVE-2026 cloud-API data-interception in mobile apps (medium, disclosed 2026-05-08, Cisco Talos). EZVIZ runs a Security Response Center + YesWeHack bug bounty. [Confirmed] — https://www.bitdefender.com/en-us/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams, https://www.sentinelone.com/vulnerability-database/cve-2024-42531/, https://www.ezviz.com/inter/trust-center/security/security-notice/2026.05.08

Regulatory note

as a Hikvision subsidiary, EZVIZ equipment is subject to U.S. NDAA Section 889 federal-procurement restrictions; EZVIZ is a CSA-IoT member with a CSA STAR registry entry. [Confirmed] — https://en.wikipedia.org/wiki/Hikvision, https://csa-iot.org/member/hangzhou-ezviz-network-co-ltd/

MA-M / MA-S registry match

none — no Hangzhou Ezviz entries in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S) [Confirmed] — the IEEE MA-M registry, the IEEE MA-S registry

Analyst note

an EZVIZ OUI on a network reliably flags a Hikvision-family consumer surveillance device — worth correlating against firmware/CVE exposure and, in federal/enterprise contexts, NDAA 889 procurement policy.