Mimosa Networks — 6 prefixes (MA-L)

Mimosa Networks holds six IEEE MA-L (24-bit OUI) blocks, all registered to "Mimosa Networks" at 3150 Coronado Dr, Santa Clara, CA 95054 — the company's Silicon Valley origin, founded there in 2012. Mimosa builds outdoor fixed wireless access (FWA) and wireless backhaul hardware rather than consumer gear, so a Mimosa OUI on a trace strongly signals last-mile or backhaul infrastructure: point-to-point backhaul radios (the B-series — B5, B5c, B6x, B11, B24), point-to-multipoint access points (the A-series — A5x, A6), and client/CPE radios (the C-series — C5c, C5x, C6, C6x). The devices are IP67 outdoor-rated and run unlicensed 5 GHz and 6 GHz spectrum (Wi-Fi 5 / Wi-Fi 6E), using Massive MIMO, GPS Sync for colocation and channel reuse, and Dual-Link redundancy; typical buyers are WISPs, rural-broadband operators, cable FWA, utilities, and smart cities. Ownership has changed hands: Mimosa was founded independently, later sat under Airspan Networks, and in 2023 Radisys Corporation (a subsidiary of Jio Platforms / Reliance Jio) acquired it from Airspan for roughly US$60 million. The critical analyst caveat is security: CISA ICS advisory ICSA-22-034-02 (February 2022) disclosed seven vulnerabilities in the Mimosa Management Platform and PTP/PTMP products, three of them scoring CVSS 10.0 — including unauthenticated remote code execution, SQL injection, broken authorization on API calls, and unsalted MD5 password hashing, with potential reach into the cloud-connected management platform's AWS resources. Any visible Mimosa management interface should be treated as high-priority for firmware patching and network isolation. As with all IEEE OUI work, no registration date is published — third-party "date registered" values (e.g. 2012-10-05 for 20:B5:C6) are database artifacts, not IEEE facts.

IEEE assignment

6 prefixes → Mimosa Networks, registered 3150 Coronado Dr, Santa Clara, CA, US 95054 [Confirmed] — IEEE MA-L (cached oui.csv registry; rows 20B5C6, 8CB6C5, 849CA4, 9070BF, CC54FE, D0B0DF)

Registry / block size

MA-L (24-bit OUI); holds 6 IEEE prefixes [Confirmed] — IEEE MA-L (oui.csv). No MA-M (mam.csv) or MA-S (oui36.csv) blocks found. NOTE: IEEE's public OUI data publishes NO assignment/registration date (columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on maclookup.app or hwaddress.com (e.g. 2012-10-05 for 20:B5:C6, 2026-05-27 for D0:B0:DF) is a database artifact, not an IEEE fact.

HQ / country

3150 Coronado Dr, Santa Clara, CA 95054, US (registry address; founded Silicon Valley 2012) [Confirmed] — IEEE MA-L, https://mimosa.co/, https://hwaddress.com/company/mimosa-networks/

Company status

active; brand operating under Radisys [Confirmed] — https://mimosa.co/

Current owner

Radisys Corporation (subsidiary of Jio Platforms Limited / Reliance Jio); Radisys acquired Mimosa from Airspan Networks in 2023 for ~US$60 million [Confirmed] — https://www.businesswire.com/news/home/20230811759024/en/Radisys-Acquires-Mimosa-to-Accelerate-Availability-of-Broadband-Access-for-Advancing-Societies , https://airspan.com/news/airspan-networks-holdings-and-radisys-corporation-radisys-a-subsidiary-of-jio-platforms-limited-announce-signing-of-definitive-agreements-for-sale-of-mimosa-networks-inc-to-radisys/

Device types

outdoor fixed wireless access (FWA) and wireless backhaul radios — PTP backhaul (B-series: B5, B5c, B6x, B11, B24), PTMP access points (A-series: A5x, A6), client/CPE radios (C-series: C5c, C5x, C6, C6x); all IP67 outdoor-rated [Confirmed] — https://mimosa.co/ , https://www.rcrwireless.com/20251203/private-5g/mimosa-purpose-built-fwa-2

Key technologies

Massive MIMO, GPS Sync (colocation / channel reuse), Dual-Link redundancy, throughput up to ~3.0 Gbps (B6x), sub-1 ms latency; unlicensed 5 GHz and 6 GHz (Wi-Fi 5 / Wi-Fi 6E) [Confirmed] — https://mimosa.co/ , https://www.hulanetworks.com/mimosa.html

Verified sample prefixes (all MA-L, Mimosa Networks)

20:B5:C6, 84:9C:A4, 8C:B6:C5, 90:70:BF, CC:54:FE, D0:B0:DF [Confirmed] — IEEE MA-L (oui.csv); cross-listed on https://maclookup.app/vendors/mimosa-networks , https://hwaddress.com/company/mimosa-networks/

Security context

CISA ICS advisory ICSA-22-034-02 (Feb 2022) disclosed 7 vulnerabilities in the Mimosa Management Platform (MMP) and PTP/PTMP products — 3 rated CVSS 10.0. Types: SQL injection, missing input validation, improper API authorization, unsalted MD5 password hashing, unauthenticated remote code execution, and potential compromise of cloud AWS EC2/S3 resources via the management platform. Affected: MMP < v1.0.3, PTP C5c/C5x < v2.8.6.1, PTMP A5x/C-series < v2.5.4.1; patched in MMP 1.0.4+, PTP 2.90+, PTMP 2.9.0+. Separately, 2017-era firmware (B5/B5c/C5c up to 2.8.0.3) had command injection and unauthenticated file disclosure via the MQTT (Mosquitto) broker. No active exploitation (IoCs) documented at disclosure. [Confirmed] — https://www.cisa.gov/news-events/ics-advisories/icsa-22-034-02 , https://thehackernews.com/2022/02/cisa-warns-of-critical-vulnerabilities.html , https://www.securityweek.com/critical-flaws-expose-mimosa-wireless-broadband-devices-remote-attacks/

Special note

oldest/primary block 20:B5:C6 aligns with the 2012 founding; D0:B0:DF appears most recently in third-party databases (artifact date 2026-05-27) and may be in active deployment [Likely] — https://maclookup.app/vendors/mimosa-networks , https://hwaddress.com/company/mimosa-networks/

Analyst note

a Mimosa MAC on a trace indicates outdoor fixed wireless infrastructure (backhaul link or PTMP AP/CPE), not a consumer device — normal on ISP/enterprise last-mile or backhaul. Given the documented CVSS-10 flaws, any reachable management interface warrants firmware-version checking and isolation. [Confirmed] — https://mimosa.co/ , https://thehackernews.com/2022/02/cisa-warns-of-critical-vulnerabilities.html