MAC address vendor

Hirschmann Automation and Control GmbH — industrial networking (MA-L)

Primary prefix
00:80:63
Block
MA-L
Status
Active

Summary

// what this is
Hirschmann Automation and Control is registered to MAC prefix 00:80:63 and 5 more in the IEEE OUI database. When a device's MAC address begins with 00:80:63, that block was registered by Hirschmann Automation and Control — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
Treat the 6 confirmed prefixes as one consolidated vendor; do not merge in the Multimedia B.V., TRIAX-HIRSCHMANN, Austria, or Suzhou registrants, which are separate legal entities despite the shared brand name.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: Medium-High

Hirschmann Automation and Control GmbH is a German industrial-networking manufacturer headquartered in Neckartenzlingen, Baden-Württemberg, and a subsidiary of Belden Inc. since a 2007 acquisition. The registry shows the company holds at least six confirmed MA-L (24-bit) OUI blocks under the exact registrant string "Hirschmann Automation and Control GmbH" — this entry's primary prefix 00:80:63 plus 64:60:38, 74:0B:B0, 94:FC:87, A0:B0:86, and EC:74:BA — which rules out treating this as a bare single-OUI shell registration. Independent corroboration comes from a documented CVE and CISA ICS-CERT advisory history tied to named, still-referenced product families (the "Classic Platform" RS/RSR/RSB/MACH/MS/OCTOPUS switch lines and the HiOS/HiSecOS firmware line), which confirms these OUIs sit on genuine deployed embedded industrial Ethernet switches rather than an inactive or paper registration. The broader "Hirschmann" name is shared by several legally distinct registrants — Hirschmann Multimedia B.V. (Netherlands), TRIAX-HIRSCHMANN Multi-Media GmbH (MA-S), Hirschmann Austria GmbH, and two China-based "Belden Hirschmann Industries (Suzhou) Limited" blocks — none of which should be conflated with this Automation and Control entry. IEEE's public OUI data does not publish an assignment/registration date for any of these blocks, so date fields stay unknown rather than fabricated.

Primary prefix / registry class
00:80:63, MA-L [Confirmed] — the IEEE MA-L registry
Organization name (exact registrant string)
"Hirschmann Automation and Control GmbH" [Confirmed] — the IEEE MA-L registry
Registered address
Stuttgarter Straße 45-51, Neckartenzlingen, DE D-72654 [Confirmed] — the IEEE MA-L registry
Additional confirmed MA-L blocks under the same exact registrant string
64:60:38, 74:0B:B0, 94:FC:87, A0:B0:86, EC:74:BA (EC:74:BA carries a slightly reworded address: "Stuttgarter Strasse 45-51, Neckartenzlingen, Baden-Württemberg, DE 72654") [Confirmed] — the IEEE MA-L registry (multiple lines, see JSON other_prefixes)
Additional possible block, unverified
EC:E5:55, "Hirschmann Automation" (abbreviated form) — appears only in the Wireshark manufacturer database DB cross-reference, not independently confirmed against the IEEE MA-L registry text [Likely, not Confirmed] — the Wireshark manufacturer database
Date registered
not published by IEEE for MA-L assignments (the IEEE MA-L registry carries no date column); left Unknown, not fabricated [Confirmed as Unknown] — the IEEE MA-L registry
Company background / parent
subsidiary of Belden Inc. (US), acquired 2007; HQ Neckartenzlingen, Baden-Württemberg, Germany; industrial networking manufacturer (managed/unmanaged Ethernet switches, wireless LAN, media converters, industrial security systems for harsh-environment deployment) [Likely — single-angle web research, not independently cross-confirmed by a second source in this cycle] — https://www.industrialnetworking.com/all-brands/brand/?name=Hirschmann, https://www.bloomberg.com/profile/company/896420Z:GR
Website
hirschmann.com (direct fetch of belden.com/products/brands/hirschmann returned HTTP 403 and was not used as a source) [Confirmed reachable/cited] — https://hirschmann.com/en/Hirschmann_Produkte/Industrial_Ethernet/Report_a_Security_Vulnerability/index.phtml
Security / product-substance evidence
CISA ICSA-18-065-01 (Classic Platform Switches: RS, RSR, RSB, MACH100/1000/4000, MS, OCTOPUS Classic); CISA ICSA-20-091-01 (HiOS/HiSecOS products); CVE-2018-5461/5465/5467/5469 (session fixation, weak encryption, hard-coded credentials, brute-forceable login in switch web management); CERT/CC VU#507216 (SNMP community string leaks admin password) [Confirmed] — https://www.cisa.gov/news-events/ics-advisories/icsa-18-065-01, https://www.cisa.gov/news-events/ics-advisories/icsa-20-091-01, https://www.kb.cert.org/vuls/id/507216, https://www.ptsecurity.com/ww-en/about/news/vulnerabilities-in-hirschmann-switches-endanger-industrial-companies/
Related but legally distinct "Hirschmann" registrants (do not conflate with this entry)
Hirschmann Multimedia B.V. (00:1A:7C, Netherlands); TRIAX-HIRSCHMANN Multi-Media GmbH (00:1B:C5:00:60/36, MA-S); Hirschmann Austria GmbH (00:D0:26); Belden Hirschmann Industries (Suzhou) Limited (94:AE:E3, A0:26:05, China) [Confirmed distinct registrants] — the IEEE MA-L registry (multiple lines)
Company-substance verdict
SUBSTANTIVE — multiple confirmed OUI blocks plus documented, still-referenced product lines with an active CISA/CERT vulnerability-disclosure history [Confirmed] — sources above
[ 02 ] — OUI prefixes

Assignments by IEEE.

1 of 6
// registered prefixes1 of 6
  1. 00:80:63MA-L
Listing 1 representative prefixes; this vendor holds 6 total assignments.
[ 03 ] — Related

Keep digging.