Hangzhou Hikvision Digital Technology Co.,Ltd. — 83 prefixes (MA-L)

Hangzhou Hikvision Digital Technology Co.,Ltd. holds 83 distinct MA-L (24-bit) OUI blocks in the IEEE registry, all under one consistent registrant name and a single Hangzhou address family (No.555 Qianmo Road and No.469 Jianghui Road, both Hangzhou, Zhejiang, CN 310052). That block count — repeated large-scale allocations rather than a lone prefix — is the fingerprint of a high-volume embedded-hardware manufacturer, and Hikvision is exactly that: a video-surveillance vendor whose OUI-bearing devices are IP network cameras, DVR/NVR recording appliances, PTZ/panoramic/thermal cameras, and increasingly access-control, intercom, and AIoT edge hardware. The registrant is worth knowing beyond its device catalog. Hangzhou Hikvision is named directly in statute — one of five entities in the 2019 NDAA Section 889(f)(3) "covered" telecommunications and video-surveillance list (alongside Huawei, ZTE, Hytera, and Dahua) — barring U.S. federal procurement and, more broadly, federal-contractor use. It is separately listed by name on the FCC's Covered List, and the FCC's November 2022 ban on new equipment authorizations for most Hikvision products was upheld by the D.C. Circuit in April 2024 (Hikvision USA, Inc. v. FCC, No. 23-1032). Independent of the regulatory picture, Hikvision firmware carries a documented history of high-severity CVEs, including CVE-2017-7921 (a hardcoded authentication-bypass string, CVSS 9.8, on CISA's Known Exploited Vulnerabilities catalog). Two data-quality caveats apply. First, "Prama Hikvision India Private Limited" (Hikvision's India joint venture) is a separate IEEE registrant with its own prefixes (BC:29:78, 24:B1:05) at a Mumbai address — a distinct legal entity that must not be merged into this vendor's prefix list. Second, no IEEE-attributed registration date should ever be published for these prefixes: IEEE's public OUI data carries no date column, and any "date registered" from a third-party lookup tool is a database scrape artifact, not an IEEE fact.

IEEE assignment

83 prefixes → Hangzhou Hikvision Digital Technology Co.,Ltd., registered Hangzhou, Zhejiang, CN [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI); 83 IEEE prefixes. All 83 are in the IEEE MA-L registry; none appear in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S), confirming MA-L only. [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

No.555 Qianmo Road, Hangzhou, Zhejiang, CN 310052 (majority of blocks); No.469 Jianghui Road, Hangzhou, Zhejiang, CN 310052 (subset, e.g. 8CE748, C056E3, BCAD28, A41437). Both are registry-recorded addresses for the same registrant, not conflicting facts. [Confirmed] — the IEEE MA-L registry

Company status

active [Confirmed] — hikvision.com

Device types

IP network cameras, DVR/NVR (network video recorders), PTZ/panoramic/thermal cameras, access-control, intercom, and AIoT edge devices [Confirmed] — hikvision.com product pages; corroborated by CVE product descriptions ("Hikvision IP Cameras, DVRs, and NVR Devices")

Notable products

video-surveillance hardware line (network cameras, NVR/DVR appliances)

Verified sample prefixes (all MA-L, Hangzhou Hikvision Digital Technology Co.,Ltd.)

0C:75:D2, 54:8C:81, 24:48:45, EC:C8:9C, 8C:E7:48 [Confirmed] — the IEEE MA-L registry

Security / regulatory context

Named in 2019 NDAA Section 889(f)(3) (one of five statutorily "covered" telecom/video-surveillance entities). Listed by name on the FCC Covered List; FCC banned new equipment authorizations for most Hikvision products Nov 2022, upheld by D.C. Circuit Apr 2024 (Hikvision USA, Inc. v. FCC, No. 23-1032); further FCC supply-chain rulemaking published in the Federal Register Dec 4, 2025.

[Confirmed] — fcc.gov/supplychain/coveredlist, law.justia.com (23-1032), federalregister.gov

Vulnerability history

CVE-2017-7921 (auth-bypass via hardcoded magic string, CVSS 9.8, on CISA KEV, actively exploited); CVE-2013-4976 (hardcoded-credentials bypass on a DS-2CD7153-E IP camera, CVSS 7.5). [Confirmed] — action1.com/vulnerabilities/cve-2017-7921, cve.akaoma.com/vendor/hikvision

Related vendors

Prama Hikvision India Private Limited — separate IEEE registrant (MA-L, prefixes BC:29:78 and 24:B1:05, Mumbai address); a distinct legal entity (India JV), NOT part of this vendor's 83-block count. [Confirmed] — the IEEE MA-L registry

Analyst note

A globally-administered Hikvision OUI reliably identifies genuine Hikvision video-surveillance hardware. Given the U.S. federal procurement/contractor prohibitions (NDAA 889, FCC Covered List), an asset-inventory hit on one of these prefixes is a compliance-relevant flag in U.S. federal, federally-funded, or federal-contractor environments.