SFR — 12 prefixes (MA-L)
Summary
- // what this is
- SFR is registered to MAC prefix
8C:94:CCand 11 more in the IEEE OUI database. When a device's MAC address begins with8C:94:CC, that block was registered by SFR — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- SFR is a substantive, well-documented telecom operator holding 12 confirmed MA-L blocks tied to a single consumer gateway product line (SFR Box) — not a bare single-OUI shell registration.
About this vendor.
SFR holds 12 separate IEEE MA-L (24-bit OUI) assignments, all registered to "SFR" with no MA-M or MA-S allocations found in the companion registries. SFR is a major French telecommunications operator — a subsidiary of Altice France with roughly 26 million mobile subscribers — currently the subject of a 2026 acquisition agreement (reported at ~€20.35B) under which Bouygues, Iliad/Free, and Orange would divide its assets, per Bouygues' own investor materials and independent telecom-press coverage. Most of the 12 prefixes trace to SFR's Boulogne-Billancourt or La Plaine Saint-Denis facilities, with one outlier registered at a Nanterre address, and the registry data itself carries visible inconsistencies (spelling, punctuation, and postal-code variants) across otherwise-identical addresses — a source artifact, not a normalization choice. The prefixes correspond to SFR's residential "SFR Box" gateway hardware line, and the firmware has documented reflected-XSS history, though exact CVE identifiers could not be independently confirmed from a blocked source.
- IEEE assignment
- 12 MA-L prefixes registered to "SFR" — 8C:94:CC, CC:2D:1B, 60:35:C0, 6C:61:F4, E4:5D:51, 00:17:33, 00:25:15, E0:A1:D7, 00:1D:16, 30:7E:CB, 44:CE:7D, 24:95:04 [Confirmed] — the IEEE MA-L registry
- Registry / block size
- MA-L only; zero matches in the IEEE MA-M registry (MA-M) and zero matches in the IEEE MA-S registry (MA-S) [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
- Registered addresses
- 11 of 12 prefixes cluster around either "12 rue Jean-Philippe Rameau CS 80001, La Plaine Saint Denis, FR 93634" or "Quai du Point du Jour, Boulogne-Billancourt, FR" (rendered 3 slightly different ways in the source registry — spelling, punctuation, postal code); one prefix (44:CE:7D) is at "5 Rue Noel Pons, Nanterre, FR 92000"[Confirmed] — the IEEE MA-L registry
- Country
- FR (France) [Confirmed] — the IEEE MA-L registry
- Company status
- active — SFR is a major French mobile/broadband operator (~26M mobile subscribers), subsidiary of Altice France, party to a 2026 acquisition agreement (~€20.35B) with a Bouygues/Iliad-Free/Orange consortium [Confirmed] — https://en.wikipedia.org/wiki/SFR, https://www.bouygues.com/wp-content/uploads/2026/04/pr_exclusivenegotations_alticesfr_en.pdf, https://www.lightreading.com/finance/french-telcos-strike-20-4b-deal-to-buy-altice-s-sfr
- Company substance corroboration
- independently confirmed as holding these same 12 prefixes by a third-party lookup tool, consistent with the repo registry [Confirmed] — https://maclookup.app/vendors/sfr
- Device types
- "SFR Box" residential gateways (models NB6, NB7, Box 7/8/8X, Box THD 4K) combining router/modem/TV set-top functions [Likely] — https://modem.tools/router/sfr/, https://www.ariase.com/box/actualite/box-sfr-5-modems-au-choix, https://lafibre.info/sfr-debit/quels-sont-les-composants-internes-a-la-box-sfr-8-modem-gateway/
- Security context
- multiple reflected-XSS issues documented against "SFR Box Router" firmware (branch NB6-MAIN-R3.3.4) across three independent vulnerability trackers; specific CVE IDs and disclosure dates Unknown — the primary tracker (cvedetails.com) returned HTTP 403 on fetch [Likely] — https://www.cvedetails.com/vulnerability-list/vendor_id-13165/SFR.html, https://vulners.com/search/vendors/sfr/products/sfr%20box%20router%20firmware?score=4, https://vulmon.com/searchpage?q=sfr
- Date-registered caveat
- IEEE's public the IEEE MA-L registry publishes no assignment/registration date column for any of these 12 prefixes; per-prefix "date registered" values shown by third-party tools (e.g. maclookup.app) are database/crawl artifacts, not IEEE facts, and are not recorded as registration dates here[Confirmed] — the IEEE MA-L registry, https://maclookup.app/vendors/sfr
- Related vendors
- Altice France (parent company) [Confirmed] — https://en.wikipedia.org/wiki/SFR