Red Lion Controls, LP — 4 prefixes (MA-L)

A MAC address starting 00:60:DA, 00:A0:1D, 00:13:47, or 00:07:AF belongs to Red Lion Controls, LP, an industrial automation manufacturer — so the hardware is almost always operational-technology (OT) or industrial-control-system (ICS) gear, not a consumer device or a typical office network endpoint.

Red Lion is a real, multi-decade industrial-networking vendor now operating as a brand of HMS Networks (redlion.net 301-redirects to hms-networks.com/red-lion, confirming the corporate lineage). Its product line spans touchscreen HMIs (Graphite Series, CR3000 Series), Crimson-configured HMI/RTU platforms, Sixnet-brand RTUs and managed industrial Ethernet switches, N-Tron managed Layer 2 switches, and cellular/Ethernet remote-access routers such as the RA70S.

Holding four separate IEEE MA-L blocks plus documented product lines and a multi-year CISA ICS-CERT advisory history is well past the "bare single-OUI registration" line — this is a substantive, identifiable company, not a shell. CISA has published at least six advisories against Red Lion/Sixnet/Crimson-based products, including a CVSS 10.0 unauthenticated remote-code-execution class of flaws in Sixnet RTUs; CISA's standing guidance for these is to isolate affected ICS devices from the public internet.

Two caveats worth flagging. First, a related legal-name string, "Red Lion Controls Inc.", separately holds its own OUI (00:05:E4) on third-party aggregator listings — treated here as a distinct IEEE record, not merged into this entry. Second, per-prefix "registration dates" shown by aggregator sites (e.g. maclookup.app, cleancss.com) are database artifacts, not IEEE facts — IEEE's own public OUI registry publishes no assignment-date field at all.

IEEE assignment

4 prefixes → Red Lion Controls, LP [Confirmed] — the IEEE MA-L registry (sourced from IEEE the IEEE MA-L registry)

Registry / block size

MA-L (24-bit OUI); 4 IEEE prefixes [Confirmed] — the IEEE MA-L registry

Registered address

20 Willow Springs Circle, York, 17402, US (as listed in the registry row; state token parsed as "NY" though the ZIP is in the Pennsylvania range — flagging the discrepancy rather than asserting a corrected state without a citation) [Confirmed as-listed] — the IEEE MA-L registry

Company status

active, now a brand of HMS Networks (redlion.net redirects to hms-networks.com/red-lion) [Confirmed] — hms-networks.com

Device types

industrial HMIs, RTUs, managed industrial Ethernet switches, cellular/Ethernet routers [Likely] — automationworld.com, mac-solutions.net, rs-online.com

Notable products

Graphite Series HMI, CR3000 Series HMI, Sixnet RTUs/switches, N-Tron switches, RA70S router [Likely] — automationworld.com, rs-online.com

Verified sample prefixes

00:60:DA, 00:A0:1D, 00:13:47, 00:07:AF [Confirmed] — the IEEE MA-L registry, maclookup.app

Security context

6+ CISA ICS-CERT advisories against Red Lion/Sixnet/Crimson products, including a CVSS 10.0 unauthenticated RCE class in Sixnet RTUs [Confirmed] — cisa.gov (ICSA-23-320-01, ICSA-21-005-04, ICSA-23-306-01, ICSA-19-248-01, ICSA-22-104-03, ICSA-22-321-01, ICSA-17-054-02)

Related entity

"Red Lion Controls Inc." holds a separate OUI 00:05:E4 on aggregator listings — distinct IEEE record, not merged [Likely] — maclookup.app

Registration date

Unknown — IEEE's public OUI registry publishes no assignment-date field; third-party "registration dates" (e.g. 1998-04-22, 2001-10-24, 2005-01-23) are aggregator database artifacts, not IEEE facts [Confirmed absence] — standards.ieee.org/products-programs/regauth

Analyst note

multiple OUI blocks + documented product lines + a substantial CISA advisory history clear the vendor-shell abstention bar — this is a real, identifiable industrial-automation manufacturer, not a bare orphan registration.