Seiko Epson Corporation — 21 prefixes (MA-L)

Seiko Epson Corporation holds 21 MA-L (24-bit OUI) blocks in the IEEE registry, all assigned to addresses in Nagano Prefecture, Japan — the company's home base across Matsumoto-shi, Suwa-shi, and Shiojiri-shi. Consolidating these 21 prefixes into one vendor entry is far more useful than 21 near-identical per-prefix pages, because they overwhelmingly land on the same class of hardware: network-connected printers (inkjet, laser, WorkForce Pro, large-format, and ColorWorks label printers), document scanners (including networked models such as the DS-780N, DS-870, and DS-970), projectors, and network interface accessories like Epson's Network Interface Units and Network Image Express Cards. The practical signal for analysts is strong: an Epson OUI on a network almost always means a printer, scanner, or related peripheral rather than general-purpose computing or routing gear. These devices run embedded TCP/IP stacks and expose an HTTP management interface — Web Config / EpsonNet Config — and Epson Device Admin can manage fleets of up to roughly 2,000 networked devices. That management surface carries real security weight: CVE-2024-47295 (CVSS 8.1) describes insecure initial-password configuration in Epson Web Config that lets a remote unauthenticated attacker set the admin password on first access and take the device over, and the embedded ESC/POS control language (CVE-2026-23767) ships with no authentication, authorization, or encryption — so an exposed Epson printer can become a lateral-movement pivot if not secured at setup. As with all OUI data, IEEE publishes no registration date for these blocks; any per-prefix "date registered" on third-party lookup tools is a database artifact, not an IEEE fact.

IEEE assignment

21 prefixes → Seiko Epson Corporation, registered in Nagano Prefecture, Japan [Confirmed] — IEEE MA-L

Registry / block size

MA-L (24-bit OUI); 21 IEEE prefixes. No MA-M or MA-S entries found for Seiko Epson [Confirmed] — IEEE registry (the IEEE MA-M registry / the IEEE MA-S registry checked, none present). NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools (e.g. maclookup.app) is a database artifact, not an IEEE fact.

HQ / country

3-5, Owa 3-chome, Suwa-shi, Nagano-ken 392-8502, Japan; country JP [Confirmed] — IEEE registry address variants + Epson manufacturer-address page (files.support.epson.com)

Registry address variants

four distinct address strings appear across the 21 prefixes — 2070 Kotobuki Koaka, Matsumoto-shi; 3-3-5 Owa, Suwa-shi; 80 Harashinden, Shiojiri-shi; 80 Hirooka, Shiojiri-city — all in Nagano-ken, JP [Confirmed] — IEEE MA-L

Company status

active [Confirmed] — global.epson.com

Device types

network printers (inkjet, laser, WorkForce Pro, large-format, ColorWorks label), document scanners (DS-780N, DS-870, DS-970), projectors, and network interface accessories (Network Interface Units, Network Image Express Cards); broadly classed as Device/IoT peripheral

[Confirmed] — epson.com product pages, netify.ai

Management interface

Web Config / EpsonNet Config (embedded HTTP); Epson Device Admin manages up to ~2,000 networked devices [Confirmed] — epson.com (Device Admin), maclookup.app

Verified sample prefixes (all MA-L, Seiko Epson Corporation)

00:00:48, 00:26:AB, 38:1A:52, F8:D0:27 [Confirmed] — IEEE MA-L / maclookup.app

Full prefix set (21)

00:00:48, 00:26:AB, 38:1A:52, 38:9D:92, 44:D2:44, 50:57:9C, 58:05:D9, 64:C6:D2, 64:EB:8C, 68:55:D4, 9C:AE:D3, A4:D7:3C, A4:EE:57, AC:18:26, B0:E8:92, D4:80:8B, DC:83:BF, DC:CD:2F, E0:BB:9E, F8:25:51, F8:D0:27 [Confirmed] — IEEE registry / maclookup.app

Security context

CVE-2024-47295 (CVSS 8.1, HIGH) — insecure initial password in Epson Web Config allows remote unauthenticated admin-password set and device takeover; CVE-2025-35970 — admin password guessable from SNMP-exposed info on Epson/Fujifilm products; CVE-2025-42598 (CVSS 7.8) — Epson Windows printer drivers in non-English locales vulnerable to DLL planting (local privesc to SYSTEM); CVE-2026-23767 — ESC/POS has no authentication, authorization, or encryption

[Confirmed] — nvd.nist.gov, vendor-adjacent advisories

Analyst note

an Epson OUI on a network almost always identifies a printer, scanner, or related peripheral rather than general-purpose or routing equipment; treat exposed Web Config interfaces as a takeover/lateral-movement risk if initial-password setup was skipped.

allocated_date

Unknown — IEEE publishes no OUI registration dates [Unknown] — IEEE registry