NICE Systems — 2 prefixes (MA-L)
Summary
- // what this is
- NICE Systems is registered to MAC prefix
00:02:D6and 1 more in the IEEE OUI database. When a device's MAC address begins with00:02:D6, that block was registered by NICE Systems — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Two independently corroborated full MA-L blocks (00:02:D6, 00:C0:DA) both trace to the same Israel-headquartered company, now NICE Ltd (Nasdaq: NICE). Documented CVEs (e.g. CVE-2018-0321) exist in NICE's recording software but are product/application-level, not tied to these MAC prefixes specifically.
About this vendor.
A MAC address beginning with 00:02:D6 or 00:C0:DA belongs to NICE Systems, an Israel-based vendor of contact-center voice recording, surveillance, and analytics hardware and software — a company that now operates as NICE Ltd (Nasdaq: NICE).
IEEE's public OUI registry lists two separate MA-L (/24) blocks under this organization: 00:02:D6, registered to "NICE Systems" at 8 Hapnina St., POB 690, Israel, and 00:C0:DA, registered to "NICE SYSTEMS LTD." at 3 Tevuot Ha'aretz St, Israel. Both rows are independently corroborated in the Wireshark manufacturer database, so this is a genuine multi-block registration rather than a bare single-OUI shell.
NICE Systems has since consolidated into NICE Ltd, headquartered in Ra'anana, Israel, and markets the CXone customer-experience platform alongside legacy recording products such as NICE Recording eXpress and NICE Engage. These historically shipped as network-attached appliances for contact centers, financial trading floors, and government/telecom clients — a device class consistent with holding dedicated Ethernet MAC-prefix blocks, though no vendor page was found pinning either specific prefix to a named model.
A data-quality trap to avoid: a similarly-named "NICE Total Cash Management Co., Ltd." of Seoul holds a registration under the shared, IEEE-administered 8C:1F:64 base — an unrelated Korean company that has nothing to do with NICE Systems or NICE Ltd despite the shared word "NICE." Likewise, 00:0B:98 (NiceTechVision), 00:0F:5F (Nicety Technologies), and 00:15:D5 (Nicevt) are unrelated organizations sharing only a name fragment.
NICE's recording software carries a documented history of vulnerabilities, including a SQL injection flaw (CVE-2018-0321) in NICE Recording eXpress, a reported hardcoded-password backdoor, and an unauthenticated JMX/RMI interface in NICE Engage enabling remote code execution. These are product- and application-layer findings, not weaknesses tied to the MAC/OUI prefixes themselves.
- Device class
- Contact-center voice recording, surveillance, and analytics appliances [Likely] — https://www.nice.com (no per-prefix datasheet found)
- Registered OUIs
- 00:02:D6 ("NICE Systems"), 00:C0:DA ("NICE SYSTEMS LTD.") — both MA-L (/24) [Confirmed] — the IEEE MA-L registry
- Country
- Israel (IL) [Confirmed] — the IEEE MA-L registry
- Also seen on
- Wireshark manufacturer database entries for both prefixes [Confirmed] — the Wireshark manufacturer database
- Not to be confused with
- "NICE Total Cash Management Co., Ltd." (Seoul, shared IEEE base 8C:1F:64) [Confirmed] — the IEEE MA-S registry
- IEEE assignment
- 00:02:D6 → "NICE Systems", 8 Hapnina St., POB 690, IL; 00:C0:DA → "NICE SYSTEMS LTD.", 3 Tevuot Ha'aretz St, IL [Confirmed] — the IEEE MA-L registry 0002D6, the IEEE MA-L registry 00C0DA
- Registry / block size
- MA-L (24-bit OUI); 2 confirmed blocks; no MA-M or MA-S assignments found for this organization [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
- HQ / country
- Israel (IL) at registration; company now headquartered in Ra'anana, Israel as NICE Ltd [Confirmed] — the IEEE MA-L registry; https://www.nice.com
- Company status
- active, trades as NICE Ltd (Nasdaq: NICE) [Confirmed] — https://www.nice.com
- Device types
- contact-center voice recording, surveillance, and analytics appliances [Likely] — https://www.nice.com (inferred from product line; no vendor documentation pins these specific prefixes to a model)
- Notable products
- NICE Recording eXpress, NICE Engage, NICE CXone [Confirmed] — https://www.nice.com
- Verified prefixes (both MA-L)
- 00:02:D6, 00:C0:DA [Confirmed] — the IEEE MA-L registry, the Wireshark manufacturer database
- Unrelated look-alike registrants
- "NICE Total Cash Management Co., Ltd." (Seoul, the IEEE MA-S registry 8C1F64183, shares only the IEEE-administered 8C:1F:64 base); 00:0B:98 NiceTechVision; 00:0F:5F Nicety Technologies; 00:15:D5 Nicevt [Confirmed distinct registrants] — the IEEE MA-S registry, the IEEE MA-L registry
- Registration date
- Unknown — the IEEE MA-L registry carries no date column for these rows; no date is attributed to IEEE [Confirmed absence]
- Security context (product-level, not OUI-specific)
- CVE-2018-0321 (SQL injection, NICE Recording eXpress); reported hardcoded-password backdoor; unauthenticated JMX/RMI RCE vector in NICE Engage [Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2018-0321, https://securityaffairs.com/25317/hacking/nice-recording-express-backdoor.html, https://www.cyberdefensemagazine.com/nice-recording-express-lawful-intercept-solution-is-flawed/
- ASN assignments
- none found [Confirmed absence] — the IANA Autonomous System Number registry, the IANA Autonomous System Number registry
- Analyst note
- Genuine multi-OUI company substance — two independently corroborated MA-L blocks trace to the same present-day vendor; device-type attribution is inferential from product line, not a per-prefix datasheet citation.