Icomera — 2 prefixes (MA-L)
Summary
- // what this is
- Icomera is registered to MAC prefix
40:40:6Band 1 more in the IEEE OUI database. When a device's MAC address begins with40:40:6B, that block was registered by Icomera — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- An Icomera OUI on a globally-administered address identifies onboard transit-connectivity hardware (train/bus/coach routers and Wi-Fi APs), not consumer gear; don't attribute generic transit-Wi-Fi security commentary to Icomera without a named disclosure.
About this vendor.
Icomera is a Swedish in-vehicle connectivity company, founded in 1999 in Gothenburg by four graduates of Chalmers University of Technology, that markets itself as the world's first onboard Wi-Fi provider, having fitted passenger trains with Wi-Fi as early as 2003. The cached IEEE MA-L registry lists two 24-bit OUI blocks under the identical organization name and address — 40:40:6B and 40:40:6C, both registered to "Icomera" at Odinsgatan 28, Gothenburg, SE 411 03 — and both are independently corroborated by the third-party maclookup.app database, giving confidence this is a genuine, non-fragmented company record rather than a shell registration. Icomera's product line centers on multi-modem cellular aggregation routers for buses, trains, and trams — the X5 and X7 "applications routers," built around its "SureWAN" bonded-connection technology, with recent additions covering Starlink resale and Wi-Fi 7 access points — deployed at scale on operators including Deutsche Bahn, SNCF Intercites, Trenitalia Frecciarossa, and UK operator Northern. Corporately, Icomera was acquired by ENGIE Ineo in 2017 and now sits inside Equans, the Bouygues-owned services group. On security, Icomera advertises IEC 62443-4-1 and ISO 27001 certification for its development lifecycle; a widely-cited Pen Test Partners piece on hacking train passenger Wi-Fi was checked directly and does not name Icomera or any specific vendor, so it is not treated here as an Icomera-specific finding.
- IEEE assignment
- 2 MA-L prefixes → Icomera, registered Gothenburg, SE [Confirmed] — the IEEE MA-L registry (rows 12209, 32716)
- Registry / block size
- MA-L (24-bit OUI); 2 prefixes held, corroborated by an independent third-party database listing the same 2 blocks [Confirmed] — the IEEE MA-L registry; https://maclookup.app/vendors/icomera
- HQ / country
- Odinsgatan 28, Gothenburg, SE 411 03 [Confirmed] — the IEEE MA-L registry
- Company status
- active, founded 1999 in Gothenburg by four Chalmers University of Technology graduates; acquired by ENGIE Ineo in 2017, now part of Equans (Bouygues group) [Likely] — https://www.icomera.com/about/; https://www.engie.com/en/journalists/press-releases/icomera-specialist-onboard-communications-solutions-public-transport; https://www.icomera.com/engie-ineo-acquires-icomera/
- Device types
- in-vehicle mobile connectivity routers and Wi-Fi access points for trains, buses, coaches, and trams [Confirmed] — https://www.icomera.com/about/; https://www.icomera.com/wifi-on-trains-how-does-it-work/
- Notable products
- X5 and X7 applications routers (SureWAN multi-modem cellular aggregation), Starlink-reselling satellite integration, Wi-Fi 7 access points [Likely] — https://issuu.com/icomera/docs/pf-00807_0.5_x7_product_sheet; https://issuu.com/icomera/docs/pf-00140_f_x5_product_sheet
- Named deployments
- Deutsche Bahn (since 2016), SNCF Intercites, Trenitalia Frecciarossa, Northern Rail (UK) [Likely] — https://www.icomera.com/success-stories/northern/; https://railway-news.com/icomera-the-worlds-first-onboard-wi-fi-provider-leading-innovation-since-2003/
- Verified prefixes
- 40:40:6B, 40:40:6C [Confirmed] — the IEEE MA-L registry; https://maclookup.app/vendors/icomera; the Wireshark manufacturer database (rows 25615-25616)
- Date registered
- Unknown — IEEE publishes no assignment/registration dates for OUI/MA-L blocks; not fabricated. Third-party per-prefix "registration dates" shown by maclookup.app (40:40:6B → 2010-04-11; 40:40:6C → 2021-05-06) are database artifacts, not IEEE facts, and are not recorded here as such. [Confirmed]
- Security context
- Icomera advertises IEC 62443-4-1 and ISO 27001 certification for its product-development lifecycle. A widely-cited Pen Test Partners article on hacking train passenger Wi-Fi (default admin credentials, missing network segregation) was read in full and does not name Icomera, any other vendor, or any router model — it is generic industry commentary, not an Icomera-specific finding, and is not attributed to Icomera here. No CVE or NVD entry specific to Icomera hardware was found. [Likely for certification claims — self-reported; Confirmed that the Pen Test Partners piece does not name Icomera] — https://railway-news.com/icomera-achieves-major-cybersecurity-milestone-with-iec-62443-4-1-certification/; https://www.pentestpartners.com/security-blog/hacking-train-passenger-wi-fi/
- Analyst note
- an Icomera OUI reliably flags in-vehicle transit connectivity hardware (train/bus/coach onboard routers and Wi-Fi APs) rather than a consumer device; treat generic transit-Wi-Fi security commentary (e.g. the Pen Test Partners piece) as industry-level context, not a confirmed Icomera-specific vulnerability, absent a named disclosure.