Mercury Corporation — 2 prefixes (MA-L)

A MAC address beginning with 28:4E:E9 or E4:7C:1A belongs to Mercury Corporation (주식회사 머큐리), a South Korean networking-equipment manufacturer headquartered in Incheon — typically seen on home and FTTH gateways, VoIP gateways, L2/L3 switches, access points, and carrier-branded routers sold through Korea Telecom (KT).

IEEE's MA-L registry confirms two blocks assigned directly to this organization (registered under the spelling "mercury corperation"), both listed at 90 Gajaeul-ro, Seo-gu, Incheon 22830, South Korea. Third-party aggregators additionally list six older-looking blocks — 00:27:1C, 08:5D:DD, 0C:96:CD, 50:46:AE, 88:3C:1C, and B4:A9:4F — at the same address; these six are registered to MERCURY CORPORATION, a separate IEEE registrant string at the same Incheon address that normalises to the distinct slug vendor-mercury, and are out of scope for this entry.

Mercury Corporation is a substantive, identifiable company, not a bare OUI registration: founded 1983, KOSDAQ-listed (100590.KQ), a subsidiary of Eyesvision Corp, with a live product site (mercury.co.kr) and roughly 130 employees as of 2025. A 2025 CVE (CVE-2025-10392, CVSS 8.9) documents an unauthenticated stack-buffer-overflow in a Mercury KM08-708H GiGA WiFi Wave2 router, corroborating the device-type identification above.

Do not confuse this vendor with Mercury Security Corporation (a separate US access-control hardware company with its own OUI registration), MERCUSYS (a TP-Link budget sub-brand), or Mercury Systems (US aerospace/defense electronics) — all surface under the plain name "Mercury" in search results but are unrelated companies.

Vendor

Mercury Corporation (Korean: 주식회사 머큐리; registered with IEEE as "mercury corperation")

Company status

Active, KOSDAQ-listed (100590.KQ), subsidiary of Eyesvision Corp

Also seen on

Mercury KM08-708H GiGA WiFi Wave2 router (CVE-2025-10392)

Not to be confused with

Mercury Security Corporation, MERCUSYS, Mercury Systems

IEEE assignment

2 confirmed MA-L blocks (28:4E:E9, E4:7C:1A) → "mercury corperation" (registry spelling), registered Incheon, South Korea [Confirmed] — the IEEE MA-L registry 284EE9, the IEEE MA-L registry E47C1A

Registry / block size

MA-L (24-bit OUI); local registry shows exactly 2 direct assignments; the IEEE MA-L registry additionally shows 6 blocks at the same address registered to the separate registrant MERCURY CORPORATION (slug vendor-mercury), out of scope for this entry [Confirmed] — the IEEE MA-L registry 00271C, the IEEE MA-L registry 085DDD, the IEEE MA-L registry 0C96CD, the IEEE MA-L registry 5046AE, the IEEE MA-L registry 883C1C, the IEEE MA-L registry B4A94F

HQ / country

90 Gajaeul-ro, Seo-gu, Incheon 22830, South Korea (KR) [Confirmed] — the IEEE MA-L registry 284EE9

Company status

active — KOSDAQ-listed (ticker 100590.KQ), subsidiary of Eyesvision Corp, founded 1983, ~130 employees as of 2025 [Likely] — https://finance.yahoo.com/quote/100590.KQ/profile/, https://tracxn.com/d/companies/mercury-corporation/__kpAT6kz1fJ8mOF-8RSnykqtzk24nzJlcywzRxVac_ZY

Device types

home/FTTH gateways, VoIP gateways, L2/L3 switches, access points, KT-branded 5G/GiGA WiFi routers, Smart IoT platform [Likely] — https://www.mercury.co.kr/, https://www.mercury.co.kr/en/portfolio/kt-5g-router/

Notable products

Mercury KM08-708H GiGA WiFi Wave2 router, Mercury KM01-905E KT 5G Router [Likely] — https://www.sentinelone.com/vulnerability-database/cve-2025-10392/, https://www.mercury.co.kr/en/portfolio/kt-5g-router/

Verified sample prefixes

28:4E:E9, E4:7C:1A [Confirmed] — the IEEE MA-L registry 284EE9, the IEEE MA-L registry E47C1A

MA-M / MA-S assignments

none found for this organization [Confirmed] — the IEEE MA-M registry, the IEEE MA-S registry

Registration dates

Unknown — IEEE's public OUI data publishes no assignment/registration date field; third-party "Registered" dates shown by aggregators are database-crawl artifacts and disagree with each other for the same prefix

[Confirmed absence of an IEEE date] — https://macverify.com/vendor/mercury-corporation, https://maclookup.app/vendors/mercury-corporation

Security context

CVE-2025-10392 — stack-based buffer overflow (CVSS 8.9, unauthenticated remote) in Mercury KM08-708H GiGA WiFi Wave2 firmware 1.1.14 via the HTTP Host header [Likely] — https://www.sentinelone.com/vulnerability-database/cve-2025-10392/, https://secalerts.co/vulnerability/CVE-2025-10392

Name disambiguation

not to be confused with Mercury Security Corporation (separate US access-control vendor with its own OUI), MERCUSYS (TP-Link sub-brand), or Mercury Systems (US aerospace/defense) [Confirmed] — https://macverify.com/vendor/mercury-security-corporation, https://en.wikipedia.org/wiki/Mercury_Systems

Related vendors

Eyesvision Corp (parent company) [Likely] — https://tracxn.com/d/companies/mercury-corporation/__kpAT6kz1fJ8mOF-8RSnykqtzk24nzJlcywzRxVac_ZY

Analyst note

Both confirmed blocks (28:4E:E9, E4:7C:1A) are distinct direct MA-L assignments to this single organization, not a shared IEEE administrative base — a MAC starting with either prefix reliably indicates Mercury Corporation hardware, unlike shared bases such as 70:B3:D5

[Confirmed] — the IEEE MA-L registry 284EE9, the IEEE MA-L registry E47C1A