ICU Medical, Inc. — 2 prefixes (MA-L)

ICU Medical, Inc. holds two IEEE MA-L (24-bit) OUI assignments — 00:03:B1 and 00:1A:01 — both registered to the identical corporate address, 951 Calle Amanecer, San Clemente, CA 92673, US. ICU Medical is a NASDAQ-listed (ICUI) infusion-therapy manufacturer founded in 1984, later expanded through its February 2017 acquisition of Hospira's infusion-systems business from Pfizer and its 2022 acquisition of Smiths Medical. The two OUIs map to networked medical devices across that combined product line: Plum 360, Plum A+, Plum Solo, and Plum Duo large-volume infusion pumps, the MedNet IV medication-safety software, and CADD-Solis ambulatory pumps inherited from Smiths Medical. Because infusion pumps are network-connected patient-care devices, ICU Medical publishes vendor cybersecurity claims for the Plum 360/MedNet line — encryption at rest and in transit, no patient ID stored on-pump, FIPS 140-2 compliance, and a UL 2900-1/2900-2-1 cybersecurity certification claim. Separately, CISA advisory ICSA-15-161-01 documents vulnerabilities in the Hospira-branded Plum A+ and Symbiq infusion systems from 2015 — before ICU Medical owned that product line — so it should be read as a Hospira-era finding, not an ICU-Medical-branded flaw. Two independent OUI blocks under the same organization name and address, combined with clear product, acquisition, and regulatory context, distinguish this entry from a bare single-OUI shell registration.

IEEE assignments

00:03:B1, 00:1A:01 → "ICU Medical, Inc.", registered San Clemente, CA, US [Confirmed] — the IEEE MA-L registry (IEEE MA-L, lines 13739 & 30826)

Registry / block size

MA-L (24-bit OUI) x2 blocks; no MA-M (oui36) or MA-S (oui28) assignments found for ICU Medical [Confirmed] — the IEEE MA-L registry, the IEEE MA-S registry, the IEEE MA-M registry

Registered address

951 Calle Amanecer, San Clemente, CA 92673, US — identical for both prefixes [Confirmed] — IEEE MA-L

Company status

active, publicly traded (NASDAQ: ICUI), founded 1984 [Confirmed] — https://en.wikipedia.org/wiki/ICU_Medical

Device types

infusion pumps (Plum 360, Plum A+, Plum Solo, Plum Duo), IV medication-safety software (MedNet), ambulatory pain-management pumps (CADD-Solis, via Smiths Medical) [Confirmed] — https://www.icumed.com/products/infusion-therapy/infusion-pumps-and-software/infusion-safety-software/icu-medical-mednet-iv-medication-safety-software/, https://www.icumed.com/about-us/news/2025/icu-medical-introduces-its-new-category-of-infusion-devices-with-fda-clearances-of-plum-solo-and-plum-duo-precision-iv-pumps/

Notable acquisitions

Hospira infusion-systems business acquired from Pfizer, Feb 2017; Smiths Medical acquired 2022 [Confirmed] — https://www.pfizer.com/news/press-release/press-release-detail/icu_medical_inc_to_acquire_the_hospira_infusion_systems_business_from_pfizer_inc_for_1_billion_in_cash_and_stock, https://www.icumed.com/about-us/news/2022/icu-medical-completes-acquisition-of-smiths-medical/

Security context

vendor claims for Plum 360/MedNet — encryption at rest/in transit, no on-pump patient ID, FIPS 140-2, UL 2900-1/2900-2-1 cybersecurity certification [Likely] — https://www.icumed.com/solutions/infusion-therapy/enhance-cybersecurity (WebSearch-sourced summary; direct page fetch timed out this cycle, not independently re-verified)

CISA advisory context

ICSA-15-161-01 (2015) covers Hospira-branded Plum A+ and Symbiq infusion systems — predates ICU Medical's Feb 2017 acquisition of that product line, so it is a Hospira-era finding, not an ICU-Medical-branded vulnerability [Confirmed for advisory existence/date; Likely for the "predates ownership" framing] — https://www.cisa.gov/news-events/ics-advisories/icsa-15-161-01

Assignment/registration dates

not published by IEEE for MA-L blocks; none recorded or fabricated [Confirmed] — IEEE the IEEE MA-L registry field set (Registry, Assignment, Organization Name, Organization Address only)

Related vendors

Hospira (Pfizer subsidiary, product line acquired 2017), Smiths Medical (acquired 2022) — predecessor/acquired product lines, not confirmed to hold separate OUI registrations under those names

Analyst note

two independent MA-L blocks under one organization name/address, a public FDA-regulated device maker with named infusion-pump and IV-safety-software product lines, and a documented (if pre-acquisition) CISA advisory history together establish verifiable company substance beyond a bare single-OUI shell registration.