Shenzhen Mercury Communication Technologies Co., Ltd. — 19 prefixes (MA-L)

Shenzhen Mercury Communication Technologies Co., Ltd. holds 19 MA-L blocks in the IEEE registry, all sharing one org-name string and one registrant address in Nanshan District, Shenzhen. The company is the maker behind the "MERCURY" (水星网络) consumer/SOHO networking brand — Wi-Fi routers, range extenders, switches, powerline adapters, and surveillance gear sold mainly in the China domestic market via mercurycom.com.cn. Its market position sits alongside Shenzhen peers like Tenda and TP-Link. A common community claim ties this vendor to Mercusys, TP-Link's international budget brand; TP-Link does publicly own Mercusys, but no first-party TP-Link or Mercury statement was found confirming that this exact legal entity is the manufacturer behind Mercusys, so that linkage stays [Likely], not asserted. One registry caveat matters for slug mapping: the IEEE data also carries a distinct string "MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD." (no "SHENZHEN," different building address) with its own prefixes — likely the same corporate family but treated as a separate registrant, so it should not be merged into this page. Public firmware CVEs exist for Mercury-branded router models (e.g. CVE-2020-22724 RCE on MER1200, CVE-2021-23241 LFI/auth-bypass on the MERCUSYS Mercury X18G), confirming these OUIs map to real deployed consumer router hardware.

IEEE assignment

19 prefixes → SHENZHEN MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD., registered Nanshan District, Shenzhen, Guangdong, CN [Confirmed] — the IEEE MA-L registry (IEEE MA-L)

Registry / block size

MA-L (24-bit OUI); all 19 matched prefixes are MA-L (no MA-M/MA-S match) [Confirmed] — the IEEE MA-L registry. NOTE: IEEE public OUI data publishes NO assignment/registration date; any "date registered" on third-party tools (e.g. macaddress.io) is a database artifact, not an IEEE fact.

HQ / country

6th Floor, South Section, Building 23, Keyuan West, No.1 Kezhi West Road, Science and Technology Community, Yuehai Street, Nanshan District, Shenzhen, Guangdong, CN 518057 [Confirmed] — the IEEE MA-L registry (IEEE MA-L)

Company status

active [Likely] — mercurycom.com.cn (vendor site live; no first-party corporate registry status confirmed this pass)

Device types

consumer/SOHO Wi-Fi routers, range extenders/repeaters, switches, powerline (HomePlug) adapters, surveillance cameras [Likely] — mercurycom.com.cn product categories; corroborated by third-party fingerprinting DBs (Fingerbank, maclookup.app, hwaddress.com) which are inferences, not IEEE facts

Notable products

MERCURY (水星网络) home/SOHO networking line; models named in CVEs include MER1200, Mercury X18G, D196G

Verified sample prefixes (all MA-L, same org/address)

503AA0, 5CDE34, 24698E, 640DCE, 4CB7E0, 004BF3, BC54FC [Confirmed] — the IEEE MA-L registry

Full matched prefix set (19)

503AA0, 5CDE34, 24698E, 640DCE, 4CB7E0, 004BF3, BC54FC, 90769F, 4C7766, 005CC2, E4F3F5, C0A5DD, C0252F, 10634B, 044BA5, D48409, 44F971, 386B1C, 508965 [Confirmed] — the IEEE MA-L registry

Related vendors / naming caveat

IEEE also lists a separate string "MERCURY COMMUNICATION TECHNOLOGIES CO.,LTD." (no "SHENZHEN"; address Building 28, Cui Xi Fourth Road) with prefixes 488AD2, BC5FF6, C8E7D8, 8CF228 — likely same corporate family but a distinct registrant; keep as a separate entry/slug, do not merge

[Confirmed as distinct registry string] — the IEEE MA-L registry

Mercusys / TP-Link relationship

TP-Link publicly owns the Mercusys brand [Confirmed via Wikipedia TP-Link article]; that this specific legal entity is the manufacturer behind Mercusys is community-sourced (mac.lc, udger) only, NOT first-party confirmed [Likely] — https://en.wikipedia.org/wiki/TP-Link

Security context

documented firmware CVEs on Mercury-branded routers — CVE-2020-22724 (CVSS 9.8 RCE, PPTP_SERVER, MER1200 fw v1.0.1+), CVE-2021-23241 (LFI/auth-bypass path traversal, MERCUSYS Mercury X18G fw v1.0.5), plus a MntAte stack-overflow report affecting a Mercury D196G build; historical, tied to specific firmware versions

[Confirmed] — https://cve.report/software/mercury/mer1200g_firmware, https://vulners.com/nuclei/NUCLEI:CVE-2021-23241

Registration date

Unknown — IEEE publishes no OUI assignment/registration date; the cached registry CSV has no date field; leave null [Confirmed] — the IEEE MA-L registry

Analyst note

A globally-administered Mercury OUI identifies genuine Mercury hardware for asset classification, but many consumer devices use MAC randomization on Wi-Fi, so absence of a Mercury OUI does not mean "not Mercury" — don't rely on OUI alone for inventory or access control.