MAC address vendor

Nest Labs, Inc. — 2 prefixes (MA-L)

Primary prefix
64:16:66
Block
MA-L
Status
Acquired

Summary

// what this is
Nest Labs is registered to MAC prefix 64:16:66 and 1 more in the IEEE OUI database. When a device's MAC address begins with 64:16:66, that block was registered by Nest Labs — the OUI identifies the maker of the network hardware, which is not always the brand on the device. Nest Labs was acquired; the registration remains on record with IEEE.
// analyst note
A MAC in either 64:16:66 or 18:B4:30 identifies genuine Nest Labs-era hardware; the company has not held separate OUI registrations since being folded into Google Nest in 2018, so newer devices from this product line may carry Google-registered prefixes instead.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High  ·  9 sources  ·  How this page is checked

A MAC address starting with 64:16:66 or 18:B4:30 belongs to Nest Labs Inc., typically seen on smart home hardware such as Nest Learning Thermostats, Nest Protect smoke/CO detectors, and Nest Cam Wi-Fi security cameras.

Nest Labs was founded in 2010 in Palo Alto, California, by Tony Fadell and Matt Rogers, both former Apple engineers. Both of its IEEE OUI registrations list the identical registrant string "Nest Labs Inc." at 3400 Hillview Ave., Palo Alto, CA 94304 — matching the company's documented headquarters address.

Google acquired Nest Labs in a deal announced January 13, 2014, and closed the next day, for $3.2 billion. Nest operated as a distinct subsidiary through 2018, when Google folded it into its hardware division under the unified "Google Nest" brand; Nest ceased existing as a separate business entity at that point. As of an August 2026 check, nest.com issues a live redirect to the Google Store's connected-home section.

In August 2019, Cisco Talos disclosed eight vulnerabilities in the Nest Cam IQ Indoor's Weave/OpenWeave protocol stack. The most severe, CVE-2019-5035 (CVSS v3 9.0), is a brute-forceable pairing-code disclosure; CVE-2019-5039 is a heap-based buffer overflow enabling remote code execution. Both are listed on NVD under the vendor name "Nest Labs," directly corroborating this registrant against real shipped hardware.

Device class
Smart home devices — learning thermostats, smoke/CO detectors, Wi-Fi security cameras
Registry blocks
64:16:66 and 18:B4:30 (both MA-L, same registrant string and address)
Company status
Acquired by Google (announced Jan 13, 2014); folded into the "Google Nest" brand in 2018; no longer a separate entity
Also seen on
Nest Cam IQ Indoor, firmware 4620002 (per NVD CVE-2019-5035, vendor field "Nest Labs")
IEEE assignment
64:16:66 and 18:B4:30 → Nest Labs Inc., registered Palo Alto, CA, US [Confirmed] — the IEEE MA-L registry (641666), the IEEE MA-L registry (18B430)
Registry / block size
MA-L (24-bit OUI); two dedicated /24 assignments under the identical registrant string [Confirmed] — the IEEE MA-L registry (641666), the IEEE MA-L registry (18B430)
Registry coverage
no rows for "Nest Labs" found in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S) — only the two MA-L entries exist [Confirmed] — the IEEE MA-M registry, the IEEE MA-S registry
HQ / registered address
3400 Hillview Ave., Palo Alto, CA 94304, US — matches Nest Labs' documented founding headquarters [Confirmed] — the IEEE MA-L registry (641666); https://en.wikipedia.org/wiki/Nest_Labs
Company status
founded 2010; acquired by Google, deal announced Jan 13, 2014, closed Jan 14, 2014, for $3.2 billion; folded into "Google Nest" brand in 2018, ending as a distinct entity [Confirmed] — https://en.wikipedia.org/wiki/Nest_Labs; https://www.forbes.com/sites/aarontilley/2014/01/13/google-acquires-nest-for-3-2-billion/
Device types
Nest Learning Thermostat (2011), Nest Protect (Oct 2013), Nest Cam (from the 2014 Dropcam acquisition, branded June 2015) [Confirmed] — https://en.wikipedia.org/wiki/Nest_Labs
Security context
CVE-2019-5035 (CVSS v3 9.0) and CVE-2019-5039 (remote code execution), among eight Weave/OpenWeave vulnerabilities disclosed by Cisco Talos in the Nest Cam IQ Indoor, listed on NVD under vendor "Nest Labs"; no CVE specific to the Nest Learning Thermostat or Nest Protect found as of an August 2026 search [Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2019-5035; https://blog.talosintelligence.com/vuln-spotlight-nest-camera-openweave-aug-2019/
IEEE registration date
not published by IEEE for either block; any "date registered" shown by third-party MAC-lookup tools is a database artifact of that tool, not an IEEE fact [Confirmed] — the IEEE MA-L registry
Shared-base check
both 64:16:66 and 18:B4:30 are dedicated /24 blocks assigned solely to Nest Labs Inc., not one of the large shared IEEE-RA bases sub-allocated across many unrelated registrants [Confirmed] — the IEEE MA-L registry (641666), the IEEE MA-L registry (18B430)
Current website
nest.com issues a live redirect to the Google Store's connected-home section as of an August 2026 check [Confirmed] — https://nest.com
Related vendors
Google, Inc. (parent since 2014; holds separate OUI registrations under its own "vendor-google" entry, not covered here) [Confirmed] — this site's own enrichment records
[ 02 ] — OUI prefixes

Assignments by IEEE.

2
// registered prefixes2
  1. 64:16:66MA-L
  2. 18:B4:30MA-L
[ 03 ] — Related

Keep digging.