Robert Bosch GmbH, the German engineering and technology multinational founded in 1886 and headquartered in Gerlingen-Schillerhöhe, Baden-Württemberg, holds at least nine IEEE MA-L (24-bit OUI) blocks registered directly to the parent legal entity. The registrations carry several internal department suffixes — plain "Robert Bosch GmbH," plus CM-CI2, VT-ATMO, and AnP — and trace to multiple Bosch sites (Gerlingen, Stuttgart, Leonberg, Reutlingen, Renningen, Ansbach, and the legacy Erbach address on the oldest block, 00:60:34). Each MA-L block carries ~16.7 million addresses, so the parent-entity footprint totals roughly 150 million addresses. The critical scoping caveat for any Bosch OUI work is that the Bosch group is sprawling: numerous subsidiaries — Bosch Security Systems, Bosch Building Automation, Bosch Access Systems, Bosch Rexroth, Robert Bosch Smart Home GmbH, Bosch Thermotechnik, Bosch Automotive, and others — hold their own OUI blocks under their own distinct legal names and are NOT counted in this parent-entity entry. Devices behind Bosch OUIs span IP cameras (FLEXIDOME, DINION, AUTODOME, MIC), intrusion/fire/access-control panels, Bosch Rexroth ctrlX industrial controllers, Home Connect smart-home appliances, and automotive ECUs. For asset classification this breadth matters: a Bosch OUI tells you the manufacturer but not the device class, and Bosch maintains an active PSIRT with multiple critical CVEs disclosed across cameras and controllers in 2024–2025, so segmenting Bosch building-automation and surveillance gear from general networks is prudent.
- IEEE assignment
- at least 9 MA-L prefixes → Robert Bosch GmbH, registered DE (Gerlingen-Schillerhöhe and other Bosch sites) [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv)
- Registry / block size
- MA-L (24-bit OUI); ~16.7M addresses per block, ~150M total across the 9 parent-entity blocks [Confirmed] — IEEE MA-L. NOTE: IEEE's public OUI data publishes NO assignment/registration date (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools (e.g. 00:60:34 → 1998-04-22 on maclookup.app) is a database artifact, not an IEEE fact. [Confirmed]
- HQ / country
- Robert-Bosch-Platz 1, Gerlingen-Schillerhöhe, 70839, DE (current corporate HQ and registry address on block 44:36:59); oldest block 00:60:34 shows legacy Postbox 11 62, D-64701 Erbach, DE [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv), maclookup.app
- Company status
- active [Confirmed] — bosch.com, en.wikipedia.org/wiki/Bosch_(company)
- Company background
- German multinational engineering/technology company, founded 1886 by Robert Bosch; privately held (94% owned by Robert Bosch Stiftung); 2024 revenue €90.3 billion; ~417,859 employees; sectors Mobility, Consumer Goods, Energy & Building Technology, Industrial Technology [Confirmed] — en.wikipedia.org/wiki/Bosch_(company)
- Device types
- IP cameras (FLEXIDOME, DINION, AUTODOME, MIC), DIVAR IP recorders, BVMS, intrusion panels (MAP 5000), fire alarm panels and AVIOTEC/AVENAR detectors, Bosch Access Systems panels, Bosch Rexroth ctrlX industrial controllers, Home Connect smart-home appliances, automotive ECUs [Confirmed] — netify.ai/resources/macs/brands/bosch, boschbuildingtechnologies.com, bosch.com
- Verified sample prefixes (all MA-L, Robert Bosch GmbH)
- 00:60:34, FC:D6:BD, BC:90:3A, CC:DD:58, 44:D7:7E, 44:36:59, A8:5B:6C (CM-CI2), 00:0D:5C (VT-ATMO), 2C:CA:75 (AnP) [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv)
- MA-M / MA-S blocks
- none registered directly under the exact legal name "Robert Bosch GmbH" [Confirmed] — IEEE MA-M (enrichment/registries/mam.csv), IEEE MA-S (enrichment/registries/oui36.csv)
- Related vendors (separate legal entities, own OUIs, NOT counted here)
- Bosch Building Automation (04:26:05), Bosch Security Systems US (00:04:63, 00:01:31), Bosch Access Systems (00:10:17, 00:1B:86), Bosch Rexroth NL (00:0B:0F), Robert Bosch Smart Home DE (64:DA:A0), Bosch Thermotechnik (F0:4A:3D), Bosch Automotive Suzhou (88:34:FE) [Confirmed] — netify.ai/resources/macs/brands/bosch
- Security context
- active PSIRT at psirt.bosch.com. Notable CVEs — CVE-2022-41677 (CVSS 5.3, info disclosure in IP cameras); BOSCH-SA-200802 (CVSS 9.8, libexpat in PRC7000); BOSCH-SA-106054-BT (CVSS 9.8, RCE in Praesensa/Praesideo); BOSCH-SA-992447-BT (CVSS 10.0, RCE in Telex RDC / RTS VLink, June 2025); 15 CVEs in Bosch Rexroth ctrlX OS (CVSS up to 8.8, 2025) [Confirmed] — psirt.bosch.com, nozominetworks.com
- Analyst note
- A Bosch OUI identifies the manufacturer but not the device class — parent-entity blocks and subsidiary blocks intermix across cameras, controllers, panels, and IoT. Segment Bosch surveillance and building-automation gear from general networks and apply PSIRT firmware updates promptly.