Netlink ICT Private Limited — 2 prefixes (MA-L)

Netlink ICT Private Limited holds two MA-L (24-bit) OUI blocks — 8C:C7:C3 and 8C:13:E2 — both registered in the IEEE registry to "NETLINK ICT" at an Ernakulam, Kerala, India address. The company (incorporated 13 February 2015 as Current Optronics Pvt. Ltd. and later renamed Netlink ICT Private Limited) is an Indian FTTH/fiber-access hardware maker: its catalog centers on GPON/GEPON ONT/ONU customer-premises units (the HG323 family — HG323, HG323DAC, HG325AX — plus V2801D, V2801RW, V2804RGW and N2801F models), GPON/GEPON OLT headend gear, SFP/PON modules, EDFA/CATV equipment, and passive optical components. Consolidating both prefixes into a single vendor entry is more useful than two near-identical per-prefix pages, since they share an organization name, address, and product line. The security-relevant caveat for asset classification: these are ISP-grade CPE deployed at scale, and Netlink-branded HG323 ONT routers are the subject of CVE-2020-8958 (authenticated OS command injection via /boaform/admin/formPing, CVSS 7.2), with a public proof-of-concept. Several of the listed models (V2801RW, V2804RGW) map to Guangzhou V-SOLUTION (V-SOL) ODM hardware that Netlink rebrands, so the same vulnerability class can span multiple rebrands. A globally-administered 8C:C7:C3 or 8C:13:E2 address reliably identifies genuine Netlink hardware, but treat such devices as elevated-risk fiber CPE and do not rely on OUI alone for access control.

IEEE assignment

2 prefixes → NETLINK ICT, registered Ernakulam, Kerala, India [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv)

Registry / block size

MA-L (24-bit OUI); holds 2 IEEE prefixes — 8C:C7:C3 (oui.csv row 689) and 8C:13:E2 (oui.csv row 14923) [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv); Wireshark manuf file cross-confirms both prefixes as "Netlink Ict". No MA-M/MA-S (mam.csv/oui36.csv) entries found. NOTE: IEEE's public OUI data publishes NO assignment/registration date (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

registry address "Jupitor Jn, Near Time kids, Koothattukulam - Piravom Rd, Ernakulam, KL, IN 686662"; corporate address per vendor site "CRT Building, 24A&B, Jupiter Junction, Piravom Road, Oliyappuram P.O., Koothattukulam, Ernakulam, Kerala 686662, India" [Confirmed] — IEEE MA-L (oui.csv), netlinkict.com/about-us, opencorpdata.com (LEI 254900VC2PRSSFSI3L09)

Company status

active; incorporated 13 February 2015 (CIN U32107KL2015PTC037972) as Current Optronics Pvt. Ltd., later renamed Netlink ICT Private Limited [Confirmed] — netlinkict.com/about-us, indiafilings.com (CIN U32107KL2015PTC037972)

Device types

GPON/GEPON ONT/ONU (HG323, HG323DAC, HG325AX, V2801D, V2801RW, V2804RGW, N2801F), GPON/GEPON OLT, SFP/PON modules, EDFA/CATV equipment, passive optical components, optical test gear (OTDR, fusion splicers) [Confirmed] — netlinkict.com/product-category/gpon-ont, amazon.in (HG323DAC listing)

Notable products

HG323-family GPON ONT routers (sold direct on netlinkict.com and on Amazon.in)

Verified prefixes (both MA-L, NETLINK ICT)

8C:C7:C3, 8C:13:E2 [Confirmed] — IEEE oui.csv (rows 689, 14923) + Wireshark manuf

Industry / markets

FTTH / fiber-access (PON) networking hardware; India (primary) with distributor coverage; also Nepal, Brazil, Central America, Africa, UAE, Canada [vendor-stated] [Likely] — netlinkict.com/about-us, zoominfo.com (single-source marketing claim, not independently audited)

Certifications

TEC (Telecom Engineering Centre, India), TSSC, TTP; member of India's telecom PLI scheme; ISO logo shown on site (specific ISO standard not stated) [Likely] — netlinkict.com/about-us, tatanexarc.com (vendor-stated/aggregator, not verified against issuing-body registries)

Security note

Netlink HG323 ONT routers are affected by CVE-2020-8958 (authenticated OS command injection via /boaform/admin/formPing target_addr, CVSS 7.2) with a public PoC. Models V2801RW / V2804RGW correspond to Guangzhou V-SOLUTION (V-SOL) ODM hardware that Netlink rebrands, so the vulnerability class can affect multiple rebrands at once. 360 Netlab's 2020 report on GPON fiber routers being weaponized for DDoS withheld the vendor, but the formPing vector matches this ONU product family. GPON/GEPON CPE broadly is an established botnet recruitment surface (Mirai/Muhstik/Gafgyt) due to default credentials and exposed management interfaces. No Netlink-specific advisory or bug-bounty program was found. [Likely] — github.com/Asjidkalam/CVE-2020-8958, vulmon.com (CVE-2020-8958), exploit-db.com/exploits/48225, blog.netlab.360.com, karansaini.com (V-SOL research)

Related vendors

Guangzhou V-SOLUTION (V-SOL) — ODM/OEM supplier whose ONT hardware Netlink rebrands (e.g. V2801RW, V2804RGW)

Disambiguation

"Netlink ICT Private Limited" (India, FTTH/PON hardware) is distinct from Shenzhen Netlink Communications Equipment Co. Ltd. (China), INT Netlink Technologies (netlinkin.com), and the Linux kernel "netlink" socket subsystem (unrelated to CVE-2020-8958, which is device-level)

Registration date

Unknown — IEEE publishes no OUI/MAC-prefix registration date; no first-party date available [Unknown] — null; IEEE MA-L has no date column

Analyst note

A globally-administered 8C:C7:C3 or 8C:13:E2 address identifies genuine Netlink ICT hardware (fiber-access CPE); treat as elevated-risk ISP CPE given the public RCE vector and V-SOL OEM supply chain. Don't rely on OUI alone for inventory or MAC-based access control.