Ruckus Wireless — 99 prefixes (MA-L)

Ruckus Wireless holds 99 MA-L (24-bit OUI) blocks in the IEEE registry, every one registered to "Ruckus Wireless" at 350 West Java Drive, Sunnyvale, CA 94089 — the count reflecting a deep catalog of enterprise and carrier-grade wireless hardware. The company builds Wi-Fi access points (indoor and outdoor, now through Wi-Fi 6/6E/7), CBRS access points, ICX-series Ethernet switches, WLAN controllers, and cloud-managed networking systems, with signature technologies including BeamFlex adaptive antennas and Dynamic Pre-Shared Key (DPSK) access control. These devices land in high-density venues — stadiums, hotels, campuses — as well as mobile-carrier and enterprise networks. Corporate ownership has changed hands repeatedly: incorporated June 2004 (as Video54 Technologies), IPO on NYSE in 2012, then acquired by Brocade (2016), Arris (2017), CommScope (2019), and later Vistance Networks; in April 2026 Belden Inc. announced a ~$1.85B acquisition expected to close in H2 2026. The brand's website is now ruckusnetworks.com (the legacy ruckuswireless.com domain redirects there). One operationally important caveat: Ruckus gear has a notable vulnerability history — most prominently CVE-2023-25717, a critical (CVSS 9.8) unauthenticated RCE in the Ruckus Wireless Admin panel that was actively exploited by the AndoryuBot DDoS botnet and added to CISA's Known Exploited Vulnerabilities catalog. A Ruckus OUI reliably tags genuine Ruckus hardware for asset inventory, but should not be treated as a security posture signal on its own.

IEEE assignment

99 MA-L prefixes → Ruckus Wireless, registered Sunnyvale, CA, US [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI); holds 99 IEEE prefixes [Confirmed] — IEEE the IEEE MA-L registry. No MA-M entries (the IEEE MA-M registry) and no MA-S entries (the IEEE MA-S registry) exist for this vendor [Confirmed] — IEEE the IEEE MA-M registry / the IEEE MA-S registry

HQ / country

350 West Java Drive, Sunnyvale, CA 94089, US (registry address) [Confirmed] — IEEE MA-L

Company status

active; brand owned by Vistance Networks, with a Belden Inc. acquisition (~$1.85B) announced April 2026, expected to close H2 2026 [Confirmed] — en.wikipedia.org/wiki/Ruckus_Networks

Device types

Wi-Fi access points (indoor/outdoor, Wi-Fi 6/6E/7), CBRS access points, ICX-series Ethernet switches, WLAN controllers, cloud-managed network systems, IoT networking [Confirmed] — ruckusnetworks.com, en.wikipedia.org/wiki/Ruckus_Networks

Notable technologies

BeamFlex adaptive antenna, Dynamic Pre-Shared Key (DPSK), zero-trust network access [Confirmed] — ruckusnetworks.com/technologies/wifi/

Verified sample prefixes (all MA-L, Ruckus Wireless)

00:13:92, 30:87:D9, 54:EC:2F, 8C:0C:90 [Confirmed] — IEEE the IEEE MA-L registry

Company background

incorporated June 2004 (as Video54 Technologies) by William Kish and Victor Shtrom; IPO on NYSE 2012; acquired by Brocade (2016) → Arris (2017) → CommScope (2019) → Vistance Networks [Confirmed] — en.wikipedia.org/wiki/Ruckus_Networks

Allocation date

Unknown — IEEE publishes NO registration/assignment date for MAC/OUI blocks (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party MAC tools (e.g. maclookup.app's earliest "06 Feb 2005") is a database artifact, not an IEEE fact.

[Unknown] — IEEE the IEEE MA-L registry

Security note

CVE-2023-25717 — critical (CVSS 9.8) unauthenticated RCE/CSRF in the Ruckus Wireless Admin panel (v10.4 and older), actively exploited by the AndoryuBot DDoS botnet; added to CISA's KEV catalog (remediation deadline 2023-06-02); affected ZoneDirector, SmartZone, and Solo APs, with no patch for end-of-life models. CVE-2023-49225 — stored XSS in the web management interface.

[Confirmed] — bleepingcomputer.com, thestack.technology, ruckusnetworks.com/support/security-bulletins/

IANA Reference

blank — OUI entries carry no IANA RFC reference [Confirmed] — IEEE the IEEE MA-L registry

Analyst note

A Ruckus OUI on a globally-administered address identifies genuine Ruckus hardware for asset classification; OUI alone is not a security signal — pair with patch-status checks given the vendor's active CVE history.