Shenzhen Gongjin Electronics Co., Ltd. (T&W) — 26 prefixes (MA-L) + 1 MA-M

Shenzhen Gongjin Electronics — trading as T&W and listed on the Shanghai Stock Exchange under ticker 603118 — is a large publicly held Chinese OEM/ODM manufacturer of broadband customer-premises equipment. Its IEEE allocation spans 26 MA-L (24-bit) blocks plus a single MA-M (28-bit) assignment (OUI36 74:33:36:1), making it one of the heavier-footprint Chinese networking-hardware vendors. A MAC bearing one of these prefixes most likely belongs to ISP-deployed residential gateway gear: ADSL/ADSL2+/VDSL and G.fast modems, EPON/GPON/XGS-PON ONUs, DOCSIS 3.0/3.1 cable modems, Wi-Fi 6/7 routers, 5G FWA/CPE, power-line adapters, or SFP optics. Gongjin also builds white-label hardware for Asus, D-Link, Motorola, Netgear, Nokia, ZyXEL, DZS, Belkin, and Alcatel-Lucent, so the same OUI can surface under many retail brands. The registry records two near-identical name variants ("…CO.,LT" on 25 of 26 MA-L rows, "…CO.,LTD" on 80:CA:4B, and "Shengzhen Gongjin Electronics" on DC:70:35 and the MA-M block) — all the same company. The security caveat worth carrying forward: Gongjin-derived firmware sat at the center of a 2014 mass-exploitation event (CVE-2014-2962, CVSS v2 7.8 HIGH), an unauthenticated absolute-path-traversal flaw in the webproc CGI that let attackers read config.xml — exposing ISP/PPPoE credentials, Wi-Fi passphrases, and admin password hashes — across an estimated 700,000+ ISP-supplied routers spanning Belkin, Asus, ZyXEL, Netgear, Alcatel-Lucent, and others. No post-2015 CVE names Gongjin directly, and no recent (2023–2025) public threat-intel report surfaces the company by name.

IEEE assignment

26 MA-L prefixes → "SHENZHEN GONGJIN ELECTRONICS CO.,LT" (dominant variant) [Confirmed] — IEEE the IEEE MA-L registry (registries/oui.csv)

Additional assignment

1 MA-M block, OUI36 74:33:36:1, org "Shengzhen Gongjin Electronics" [Confirmed] — IEEE the IEEE MA-M registry (registries/mam.csv). No MA-S (oui36) entries found.

Registry / block size

MA-L (24-bit OUI, 26 blocks) + MA-M (28-bit, 1 block) [Confirmed] — registries/oui.csv, registries/mam.csv. NOTE: IEEE's public OUI data publishes NO assignment/registration date; any "date registered" on third-party lookup tools is a database artifact, not an IEEE fact.

HQ / country

Shenzhen, Guangdong, CN. Most-recent registry address: No.1, Songgang Avenue, Songgang Street, Bao'an District, Shenzhen, Guangdong, CN 518105. Earlier registry addresses include No.2 Danzi North Road, Kengzi Street, Pingshan District (518122) and Nanshan Medical Instrument Industry Park (518067).

[Confirmed] — registries/oui.csv

Company status

active; publicly listed on Shanghai Stock Exchange (SHA:603118) since February 2015 [Confirmed] — twsz.com/en/about, stockanalysis.com/quote/sha/603118

Also known as

T&W / T&W Electronics (trade brand) [Confirmed] — twsz.com/en/about

Founded

1998 per the company's own About page; some third-party sources cite 1991 (likely a predecessor entity) [Likely] — twsz.com/en/about

Scale

~8,000 employees; net assets and annual revenue both reported in the multi-billion-CNY range by the company [Confirmed company self-report] — twsz.com/en/about

Device types

ADSL/VDSL/G.fast modems & gateways, EPON/GPON/XGS-PON ONUs, DOCSIS 3.0/3.1 cable modems, Wi-Fi 6/7 routers, 5G FWA/CPE, small cells, power-line (PLC) adapters, SFP optical transceivers, SD-WAN routers, enterprise APs, switches [Confirmed] — twsz.com/en/product, techinfodepot wiki

OEM/ODM customers

Asus, D-Link, Motorola, Netgear, Nokia, ZyXEL, DZS, Belkin, Alcatel-Lucent, Zoom [Confirmed] — techinfodepot wiki, fccid.io/V4V

FCC grantee code

V4V — 15 FCC applications 2008–2024 (wireless routers, PLC adapters, Nokia Smart Node devices, wireless modules) [Confirmed] — fccid.io/V4V

Verified sample prefixes (MA-L)

AC:6E:1A, 84:C9:C6, E4:EA:83, 68:D4:82, 80:CA:4B (CO.,LTD variant), DC:70:35 (Shengzhen variant) [Confirmed] — registries/oui.csv

Security note

CVE-2014-2962 (CVSS v2 7.8 HIGH) — unauthenticated absolute-path-traversal in the webproc CGI of Belkin N150 (F9K1009 v1) and other routers running Gongjin/T&W firmware; reads config.xml (ISP/PPPoE creds, Wi-Fi passphrase, admin password hashes). Estimated 700,000+ ISP-supplied routers across multiple brands affected; vendor did not respond to disclosure at the time. No post-2015 CVE names Gongjin directly.

[Confirmed] — nvd.nist.gov CVE-2014-2962, pcworld.com, ispreview.co.uk

Analyst note

A Gongjin OUI most often marks an ISP-deployed residential gateway, frequently rebadged under a retail brand — so the OUI identifies the manufacturer, not necessarily the brand the end user sees.