Netis Technology Co., Ltd. — networking hardware (MA-L, multi-OUI)

Netis Technology Co., Ltd. (Shenzhen, Guangdong, CN) is a networking-hardware manufacturer holding ten distinct IEEE MA-L (24-bit OUI) blocks in the local registry snapshot: 00:72:63, 04:5E:A4, 04:8D:38, 30:07:5C, 64:EE:B7, 88:BD:09, BC:62:CE, BC:E0:01, DC:8E:8D, and E4:BE:ED — all registered under the identical organization name, consistent with an ongoing product line rather than an opportunistic one-off registration. Netis is the export brand of China's Netcore Group (磊科), producing Wi-Fi and 4G/LTE routers, switches, and wireless adapters for consumer and SOHO markets, sold domestically as Netcore and internationally as Netis. This entry was previously queued under a numeric placeholder slug (vendor-43403, tied to the live page then resolving prefix 30-07-5C); it is re-emitted here under a name-derived slug so the published page shows the real organization name rather than the internal queue ID. The vendor is also security-notable: Netis/Netcore routers have a multi-year history of critical remote-exploitation flaws, from the 2014 UDP-53413 hardcoded backdoor (2M+ exposed IPs, later re-scanned by Shadowserver) to a January 2025 chained authentication-bypass/RCE set (CVE-2024-48455/48456/48457) affecting the NX10, NC65, NC63, NC21, and MW5360 models. IEEE publishes no OUI registration dates, so any "date registered" seen on third-party lookup tools is a database artifact, not a fact, and is not recorded here.

IEEE assignments (10 confirmed MA-L blocks, re-verified against the cached registry)

00:72:63 (the IEEE MA-L registry line 38224), 04:5E:A4 (line 14568), 04:8D:38 (line 14570), 30:07:5C (line 39416), 64:EE:B7 (line 14569), 88:BD:09 (line 14984), BC:62:CE (line 38229), BC:E0:01 (line 30284), DC:8E:8D (line 38222), E4:BE:ED (line 38223) — all "Netis Technology Co., Ltd."

[Confirmed] — the IEEE MA-L registry

Registry / block size

MA-L (24-bit OUI), all 10 blocks [Confirmed] — the IEEE MA-L registry

Registered addresses (vary by block — three distinct site addresses in the cached registry)

(a) Building 6, Baolong Plant, Able Technology Park, Longgang District, Shenzhen, CN 518116 — 04:5E:A4, 64:EE:B7; (b) 9F, B block, Tsinghua Information Guard, Shenzhen, Guangdong, CN 518057 — 04:8D:38; (c) No.6 Tongjiu Road, Pingxiang Economic and Technological Development District, Pingxiang, Jiangxi, CN 337099 — 88:BD:09, DC:8E:8D; (d) 8 Floor, Bd B, Information Port, Langshan RD, Nanshan District, Shenzhen, Guangdong, CN 518057 — BC:E0:01, BC:62:CE, 30:07:5C; (e) Oriental Cyberport, Hightech 6 Road, Shenzhen, CN 518057 — E4:BE:ED, 00:72:63

[Confirmed] — the IEEE MA-L registry

Company / brand

Netis Technology Co., Ltd. / Netis Systems Co., Ltd.; export brand "Netis," domestic brand "Netcore" (磊科), part of Netcore Group, founded 2000 [Likely] — https://maclookup.app/vendors/netis-technology-co-ltd , https://www.crunchbase.com/organization/netis-systems , https://leadiq.com/c/netis-systems-co-limited-netcore-technology-incgroup/5a1d96422300005b0084e89c (primary corporate domain netcoretec.com/en re-tested this cycle via direct fetch and still returns HTTP 404, despite appearing in search-engine indexes — no reachable official domain confirmed; brand/ownership descriptors rest on secondary sources, tagged Likely)

Country

CN [Confirmed] — IEEE MA-L registry addresses

Company status

active networking-hardware manufacturer [Likely] — https://maclookup.app/vendors/netis-technology-co-ltd , https://www.linkedin.com/company/netissystems (secondary corroboration; official domain fetch failed previously)

Device types

Wi-Fi routers, 4G/LTE routers, switches, wireless adapters; confirmed models NX10, NC65, NC63, NC21, MW5360 [Likely] — https://www.scworld.com/news/netis-routers-vulnerable-to-chained-authentication-bypass-rce-flaws , https://netis.goldsupplier.com/

Security / abuse context (re-verified this cycle)

recurring critical remote-exploit history — 2014 UDP-53413 hardcoded backdoor + always-open RCE port (2M+ exposed IPs); January 2025 chained trio — CVE-2024-48455 (unauthenticated information disclosure via /cgi-bin/skk_set.cgi mode_name/wl_link params), CVE-2024-48456 (authenticated command-injection RCE via the change-admin-password endpoint, /bin/this site's own tooling), CVE-2024-48457 (unauthenticated WiFi/admin password-reset bypass via /bin/this site's own tooling) — CVE-2024-48457 can be chained ahead of CVE-2024-48456 to reach full unauthenticated root RCE; affects NX10, NC65, NC63, NC21, MW5360 (plus rebranded GLCtec/Stonet units); a public Metasploit module exists [Confirmed] — https://thehackernews.com/2014/08/hardcoded-backdoor-found-in-china-made_27.html , https://isc.sans.edu/diary/21337 , https://www.shadowserver.org/what-we-do/network-reporting/netcore-netis-router-vulnerability-scan-report/ , https://www.scworld.com/news/netis-routers-vulnerable-to-chained-authentication-bypass-rce-flaws , https://www.rapid7.com/db/modules/exploit/linux/http/netis_unauth_rce_cve_2024_48456_and_48457/

Registration date

none recorded — IEEE publishes no OUI/MA-L assignment dates; third-party "First registration" dates on maclookup.app are database artifacts, not IEEE facts [Confirmed] — https://standards-oui.ieee.org/oui/oui.csv (columns: Registry, Assignment, Organization Name, Organization Address only)

IANA reference

Not applicable — MAC/OUI (IEEE) entry, not an IANA-referenced record; left blank [Confirmed]

Slug correction (re-research fix)

entry re-emitted as vendor-netis-technology, replacing the prior numeric-queue-ID slug vendor-43403; the legacy /mac/vendor/43403/ route (which currently resolves to prefix 30-07-5C) must map to this consolidated vendor entry rather than display the bare number as the org name

[Confirmed] — cross-ref of live /mac/vendor/43403/ page vs. IEEE registry

Analyst note

A Netis/Netcore globally-administered OUI identifies genuine Netis hardware, much of it in the vulnerable router family above — useful for asset classification and exposure triage, not for trust.