Osram GmbH — 84:18:26 (MA-L)
Summary
- // what this is
- Osram is registered to MAC prefix
84:18:26in the IEEE OUI database. When a device's MAC address begins with84:18:26, that block was registered by Osram — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Single-OUI registrant that clears the vendor-substance bar: identifiable, long-established company with an active corporate presence, a documented connected-lighting product line, and independently reported security history (Rapid7 CVE-2016-5051 through -5059) for that product line.
About this vendor.
A MAC address starting 84:18:26 belongs to Osram GmbH, the Munich-based lighting and photonics manufacturer, and is most plausibly seen on networked lighting-control hardware — most likely the LIGHTIFY Wi-Fi-to-ZigBee smart-lighting gateway, though no source ties this exact prefix to a named device model.
Osram GmbH is a long-established German lighting and photonics company founded in 1919, headquartered in Munich, and merged into ams OSRAM AG in 2020. Its OUI-registered address on Marcel Breuer Str. 6 sits in the same Munich postal district as ams-OSRAM's current stated group headquarters, corroborating an active, real-world registrant rather than a shell registration.
IEEE's authoritative registry lists exactly one MA-L block for Osram GmbH: 84:18:26. A second prefix, 7C:B0:3E, appears attributed to "OSRAM GmbH" in a stale local third-party snapshot, but a live lookup shows that block is currently registered to Inventronics GmbH, a separate LED-driver company — it is not part of this entry.
Osram's connected-lighting product line has documented security history: Rapid7 disclosed nine vulnerabilities (CVE-2016-5051 through CVE-2016-5059) in OSRAM SYLVANIA Lightify Home/Pro products in 2016, including a cleartext-stored Wi-Fi password and a weak default gateway pre-shared key. No advisory names the 84:18:26 OUI specifically, so this is product-line-level context rather than device-specific confirmation.
IEEE publishes no registration date for 84:18:26 or any OUI block. A third-party aggregator shows an initial-registration date of 13 July 2014, but that is a database-scrape artifact, not an IEEE fact, and is not recorded here as one.
- IEEE assignment
- 84:18:26 → Osram GmbH, registered Munich, Bavaria, DE [Confirmed] — the IEEE MA-L registry line 19304 (IEEE MA-L)
- Registry / block size
- MA-L (24-bit OUI); single confirmed prefix (84:18:26) [Confirmed] — the IEEE MA-L registry line 19304
- HQ / country
- Marcel Breuer Str. 6, Munich, Bavaria, DE 80807 (registry address) [Confirmed] — the IEEE MA-L registry line 19304
- Company status
- active (merged into ams OSRAM AG, 2020) [Confirmed] — https://en.wikipedia.org/wiki/Osram, https://ams-osram.com/about-us/locations-distribution/headquarters
- Device types
- Networked lighting-control hardware; most plausibly the LIGHTIFY Wi-Fi-to-ZigBee gateway [Likely] — https://github.com/noctarius/lightify-binary-protocol, https://devicebase.net/en/osram-lightify-pro-gateway
- Notable products
- LIGHTIFY Home/Pro smart-lighting system; ENCELIUM EXTEND Manager and DALI-based commercial lighting controllers [Likely] — Osram product-catalog references cited in research
- Verified sample prefix
- 84:18:26 (MA-L, Osram GmbH) [Confirmed] — the IEEE MA-L registry line 19304
- Stale/excluded prefix
- 7C:B0:3E, attributed to "OSRAM GmbH" in a local third-party snapshot, is currently registered to Inventronics GmbH — not part of this entry [Confirmed] — https://maclookup.app/search/result?mac=7C-B0-3E
- Registration date
- Unknown — IEEE publishes no assignment/registration date for OUI blocks; a third-party aggregator's "13 July 2014" figure is a database artifact, not an IEEE fact [Confirmed abstention] — https://maclookup.app/search/result?mac=84-18-26
- Security history
- Nine CVEs (CVE-2016-5051 through CVE-2016-5059) disclosed by Rapid7 in 2016 affecting OSRAM SYLVANIA Lightify Home/Pro products (product-line level, not OUI-specific) [Confirmed] — https://www.rapid7.com/blog/post/2016/07/26/r7-2016-10-multiple-osram-sylvania-osram-lightify-vulnerabilities-cve-2016-5051-through-5059/
- Related vendors
- ams OSRAM AG (parent, post-2020 merger); Inventronics GmbH (unrelated, holds the stale-attributed 7C:B0:3E block) [Confirmed] — https://ams-osram.com/about-us/locations-distribution/headquarters, https://maclookup.app/search/result?mac=7C-B0-3E
- Analyst note
- Single-OUI registrant but clears the vendor-substance bar on identifiable-company grounds — active corporate presence, documented product line, and independently reported security history for its connected-lighting products.