MAC address vendor

Mist Systems, Inc. — 17 prefixes (MA-L)

Primary prefix
5C:5B:35
Block
MA-L
Status
Active

Summary

// what this is
Mist Systems is registered to MAC prefix 5C:5B:35 and 16 more in the IEEE OUI database. When a device's MAC address begins with 5C:5B:35, that block was registered by Mist Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device.
// analyst note
A Mist OUI on a globally-administered address identifies a genuine Juniper Mist enterprise access point. The third-party per-prefix dates are not IEEE registration dates and must not be published as such.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High

Mist Systems, Inc. holds 17 MA-L (24-bit OUI) blocks in the IEEE registry, all registered to the same Cupertino, CA address (1601 South De Anza Blvd, Suite 248). Mist was founded in 2014 as a cloud-managed, AI-driven enterprise WLAN vendor, and was acquired by Juniper Networks in March 2019 for roughly $405M; the line is now branded Juniper Mist (Juniper itself subsequently became part of HPE). The OUIs identify enterprise Wi-Fi access points — the AP21/AP24/AP34/AP36/AP37/AP43/AP45/AP47/AP64/AP66 families spanning Wi-Fi 5 through Wi-Fi 7 — plus Mist Edge campus appliances, all managed through the Mist AI cloud platform with the Marvis virtual assistant. Many of these APs also carry a virtual BLE radio for indoor location and wayfinding. Seeing a Mist OUI in a capture reliably indicates an enterprise-grade managed access point, not consumer hardware. No MA-M or MA-S blocks are registered to Mist. As with every IEEE OUI assignment, no registration date is published: third-party tools such as maclookup.app show per-prefix dates (e.g. 2015-11-17 for 5C:5B:35), but these are database artifacts, not IEEE facts, and must not be recorded as registration dates. Mist APs have been touched only by industry-wide Wi-Fi/RADIUS protocol advisories (FragAttacks, the transmit-queue/MacStealer class, and Blast-RADIUS), never a Mist-specific hardware backdoor.

IEEE assignment
17 prefixes → Mist Systems, Inc., registered Cupertino, CA, US [Confirmed] — IEEE MA-L (cached copy)
Registry / block size
MA-L (24-bit OUI); holds 17 IEEE prefixes (each ~16M addresses) [Confirmed] — IEEE MA-L; maclookup.app/vendors/mist-systems-inc
HQ / country
1601 South De Anza Blvd, Suite 248, Cupertino, CA 95014, US [Confirmed] — IEEE MA-L. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools (e.g. maclookup.app showing 5C:5B:35 as 2015-11-17) is a database artifact, not an IEEE fact.
Company status
active, now operating as Juniper Mist (acquired by Juniper Networks March 2019, ~$405M; Juniper subsequently part of HPE) [Confirmed] — newsroom.juniper.net; blogs.juniper.net
Device types
enterprise Wi-Fi access points (Wi-Fi 5/6/6E/7 — AP21, AP24, AP34, AP36, AP37, AP43, AP45, AP47, AP64, AP66 families) and Mist Edge campus appliances; managed via Mist AI cloud; integrated virtual BLE radio for location/wayfinding
[Confirmed] — juniper.net/us/en/products/access-points.html; nomios.com
Verified sample prefixes (all MA-L, Mist Systems, Inc.)
5C:5B:35, D4:20:B0, 00:3E:73, 70:90:41 [Confirmed] — IEEE MA-L / maclookup.app/vendors/mist-systems-inc
Full prefix set (17, MA-L)
00:3E:73, A8:53:7D, D4:20:B0, 3C:94:FD, 00:D6:26, D4:DC:09, 5C:5B:35, 04:A9:24, A8:3A:79, 7C:B6:8D, C8:78:67, 54:33:C6, A8:F7:D9, AC:23:16, 70:90:41, 04:CD:C0, 14:A4:54 [Confirmed] — IEEE MA-L (cached copy)
MA-M / MA-S blocks
none — no Mist Systems entries in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S) [Confirmed] — IEEE cached registries
Security context
only industry-wide Wi-Fi/RADIUS protocol advisories apply, no Mist-specific backdoor — FragAttacks (CVE-2020-26139…26147, frame aggregation/fragmentation, Low severity, patched); CVE-2022-47522 (transmit-queue/MacStealer encryption bypass, insider); CVE-2024-3596 (Blast-RADIUS, RADIUS MD5 MITM, affects Mist Access Assurance RADIUS deployments)
[Confirmed] — mist.com/documentation; supportportal.juniper.net; cybersecurity-help.cz
Threat-actor / malware association
Unknown — no threat intel associates Mist OUIs with malicious infrastructure; a Mist OUI indicates legitimate enterprise managed Wi-Fi [Confirmed as no known association]
IANA Reference
(blank — OUI/MA-L registrations carry no IANA RFC reference) [Unknown]
Related vendors
Juniper Networks (parent since 2019); HPE (ultimate parent)
Analyst note
a Mist OUI on a globally-administered address identifies a genuine enterprise Juniper Mist access point; the third-party per-prefix "dates" are not IEEE registration dates and must not be published as such.
[ 02 ] — OUI prefixes

Assignments by IEEE.

4 of 17
// registered prefixes4 of 17
  1. 5C:5B:35MA-L
  2. D4:20:B0MA-L
  3. 00:3E:73MA-L
  4. 70:90:41MA-L
Listing 4 representative prefixes; this vendor holds 17 total assignments.
[ 03 ] — Related

Keep digging.