KEYENCE Corporation — 2 prefixes (MA-L)

KEYENCE Corporation holds two MA-L (24-bit OUI) blocks in the IEEE registry — 00:01:FC and 74:95:A7 — both registered to "Keyence Corporation" at 1-3-14 Higashi-Nakajima, Higashiyodogawa, Osaka 533-8555, Japan. KEYENCE is a major Japanese industrial-automation manufacturer founded in 1974 by Takemitsu Takizaki; it operates a fabless model (it designs hardware but outsources production) and reported revenue above $7 billion in fiscal 2024 across roughly 350,000 customers in 110 countries. Its catalog is heavily network-capable: KV-series PLCs (KV-8000 / KV-X) speak EtherNet/IP, OPC UA, EtherCAT, PROFINET, Modbus, and CC-Link; the NE series covers industrial Ethernet switches and an older NE-W01E 802.11b WLAN bridge (the device that anchors the 00:01:FC prefix via FCC/WiGLE records, default SSID "KeyenceWLAN", default IP 192.168.0.13); and the NQ/DL/NU communication units, SR-X Ethernet barcode readers, and VS/IV machine-vision systems all carry Ethernet. The practical classification note is context: KEYENCE MACs belong on segmented OT / factory-floor networks (PLC-to-sensor buses, EtherNet/IP segments), not general enterprise or consumer LANs — one appearing on an open or uncontrolled segment is unusual and worth a look. The 74:95:A7 block (a third-party database first recorded it in 2022) is attributed to KEYENCE but has no specific named product corroborated in open sources, so its device type stays Unknown. As with every OUI, IEEE publishes no registration dates; the "2015" / "2022" timestamps on lookup sites are database artifacts, not IEEE facts.

IEEE assignment

2 prefixes → Keyence Corporation, registered Osaka, JP [Confirmed] — IEEE MA-L (oui.csv)

Registry / block size

MA-L (24-bit OUI); holds 2 IEEE prefixes — 00:01:FC and 74:95:A7 [Confirmed] — IEEE oui.csv; no MA-M (mam.csv) or MA-S (oui36.csv) assignment found. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools (e.g. 00:01:FC "Nov 2015", 74:95:A7 "Nov 2022" on maclookup.app) is a database artifact, not an IEEE fact.

HQ / country

1-3-14 Higashi-Nakajima, Higashiyodogawa, Osaka 533-8555, JP [Confirmed] — IEEE MA-L (7495A7 row); the 0001FC row carries a sparser address record but the same street.

Company status

active [Confirmed] — keyence.com

Founded

1974 (27 May 1974) by Takemitsu Takizaki [Likely] — en.wikipedia.org/wiki/Keyence (single-source biographical detail; founding year corroborated by keyence.com corporate page)

Industry

industrial / factory automation (fabless manufacturer) [Confirmed] — en.wikipedia.org/wiki/Keyence, keyence.com/about-us/corporate/

Device types

KV-series PLCs (KV-8000 / KV-X, EtherNet/IP, OPC UA, EtherCAT, PROFINET, Modbus, CC-Link, DeviceNet); NE-series industrial Ethernet switches; NE-W01E 802.11b WLAN router/bridge; NQ/DL/NU Network Communication Units (IO-Link / fieldbus bridges); SR-X Ethernet barcode readers; VS/IV machine-vision systems [Confirmed] — keyence.com product pages, deviwiki.com (NE-W01E)

Verified prefix mapping

00:01:FC corroborated to the NE-W01E WLAN bridge via FCC/WiGLE + multiple MAC-lookup databases [Confirmed] — maclookup.app/vendors/keyence-corporation, deviwiki.com/wiki/Keyence_NE-W01E

Unmapped prefix

74:95:A7 attributed to KEYENCE but no specific named product corroborated in open sources — device type Unknown [Confirmed attribution; product Unknown] — maclookup.app/vendors/keyence-corporation

Primary use context

industrial / Operational Technology (OT) — segmented factory-floor networks, PLC-to-sensor buses, EtherNet/IP segments; not general enterprise or consumer LANs [Confirmed] — keyence.com/ss/products/controls/network/fieldnetwork/e_ip.jsp

Security context

known CVEs target client-side engineering software, not network-device firmware — CVE-2024-29218 (CWE-787 OOB write, CVSS 7.8) and CVE-2024-29219 (CWE-125 OOB read, CVSS 7.8) affect KV STUDIO ≤ v11.64, KV REPLAY VIEWER ≤ v2.64, and VT5-WX15/WX12 ≤ v6.02, triggered by opening a crafted file on a workstation (patched); earlier CVE-2023-42138 similarly hit KV STUDIO file parsing. No CISA ICS advisory specific to KEYENCE network hardware found. NE-W01E ships default SSID "KeyenceWLAN" / default IP 192.168.0.13, typical of OT-era devices that assume physical segmentation over authentication. [Confirmed CVEs; "no CISA advisory" = open-source absence, not proof of none] — jvn.jp/en/vu/JVNVU95439120/, jvn.jp/en/vu/JVNVU94752076/index.html, deviwiki.com/wiki/Keyence_NE-W01E

Related vendors

none identified

Analyst note

a KEYENCE OUI on a globally-administered address identifies genuine KEYENCE OT hardware; treat its appearance outside a segmented industrial network as worth investigating. OUI alone does not identify which of the two blocks/product families a device belongs to without further fingerprinting.