SICK AG — 00:06:77 (MA-L)

The OUI block 00:06:77 is registered to SICK AG, a German manufacturer of industrial sensors and sensor systems for factory and logistics automation, headquartered at Erwin-Sick-Str. 1 in Waldkirch, Baden-Württemberg (registry address "Erwin-Sick Str.1, Waldkirch, DE D-79183"). Founded in 1946, SICK is a publicly significant automation supplier — roughly 11,800 employees and about €2.1 billion in 2024 revenue — whose network-connected hardware shows up overwhelmingly in industrial control system (ICS) and operational technology (OT) environments rather than consumer networks. The products that carry an Ethernet MAC span LiDAR and laser scanners (LMS, TiM, picoScan, multiScan, nanoScan3, microScan3), barcode and RFID readers (Lector, CLV, Inspector), vision sensors, safety controllers (Flexi Soft/Compact/Classic), and industrial gateways, typically bridging to safety PLCs over EtherNet/IP, PROFINET, and IO-Link. The practical analyst read: a 00:06:77 address on a manufacturing, logistics, robotics, or perimeter-protection network is consistent with legitimate SICK sensor infrastructure; the same OUI surfacing on an ordinary office or home LAN is anomalous and worth investigating. SICK runs a dedicated PSIRT (Product Security Incident Response Team) and publishes coordinated SCA-series advisories, so its devices have a documented, actively-managed vulnerability history (buffer overflows, hard-coded credentials, Telnet/SSH exposure, and third-party component CVEs among them) — relevant when scoping OT asset inventory. Note that the brand is styled in all capitals (SICK) as a stylistic convention, not an acronym; the legal entity is the family name of founder Erwin Sick.

IEEE assignment

00:06:77 → SICK AG (MA-L) [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv; raw row MA-L,000677,SICK AG,Erwin-Sick Str.1 Waldkirch DE D-79183)

Registry / block size

MA-L (24-bit OUI) [Confirmed] — IEEE MA-L. NOTE: IEEE's public OUI data publishes NO assignment/registration date (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on a third-party tool is a database artifact, not an IEEE fact.

HQ / registry address

Erwin-Sick-Str. 1, 79183 Waldkirch (Breisgau), Baden-Württemberg, Germany [Confirmed] — IEEE MA-L registry address; corroborated by https://en.wikipedia.org/wiki/Sick_AG and https://www.sick.com/ag/en/

Country

DE (Germany) [Confirmed] — IEEE MA-L

Company status

active [Confirmed] — https://www.sick.com/ag/en/ ; https://en.wikipedia.org/wiki/Sick_AG

Founded

1946 [Confirmed] — https://en.wikipedia.org/wiki/Sick_AG

Size (context, drifts)

~11,804 employees; ~€2.1 billion revenue (2024 figures) [Confirmed] — https://en.wikipedia.org/wiki/Sick_AG

Device types

industrial sensors and sensor systems — LiDAR/laser scanners (LMS, TiM, picoScan, multiScan, nanoScan3, microScan3); barcode/RFID readers (Lector, CLV, Inspector); vision sensors; safety controllers (Flexi Soft/Compact/Classic); industrial gateways (e.g. ICR890, DL100); gas analyzers and flow meters [Confirmed] — https://en.wikipedia.org/wiki/Sick_AG ; https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt

Connectivity / network role

Ethernet devices bridge to safety PLCs over EtherNet/IP, PROFINET, IO-Link, and TCP/IP in OT/ICS networks [Confirmed] — https://sickconnect.com/communicate-with-a-safety-laser-scanner-plcs-microscan3-safety-laser-scanner-ethernet-ip-profinet/ ; https://industrialmonitordirect.com/blogs/knowledgebase/sick-clv630-barcode-scanner-to-controllogix-ethernetip-integration

Typical network environment

ICS/OT networks — manufacturing plants, logistics/warehousing, robotics, facility/perimeter protection, ports, autonomous vehicles; increasingly Industry 4.0 with IIoT gateway and cloud-analytics connectivity [Confirmed] — https://sickconnect.com/cybersecurity-safety-sensors-building-trust-in-modern-manufacturing/

Security context

SICK operates a PSIRT (psirt@sick.de) publishing coordinated SCA-series advisories (~62 since 2019, CVSS ~3.7–10.0); documented classes include buffer overflows, hard-coded credentials, Telnet exposure, XSS, crypto weaknesses, DoS, SSH misconfigurations, AutoIP flaws, and third-party-component CVEs (OpenSSL, FreeRTOS, Log4j, Eclipse Cyclone DDS, WIBU); coordinates with CISA/ICS-CERT; holds IEC 62443-4-1 / 62443-4-2 certifications. Example: SCA-2026-0005 addressed SSH issues (CVE-2026-1626, CVE-2026-1627) [Confirmed] — https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt ; https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf

Notable facts

SICK LiDAR was used on "Stanley," the autonomous vehicle that won the 2005 DARPA Grand Challenge; 63+ subsidiaries globally; "SICK" is stylized all-caps (the founder's surname), not an acronym [Confirmed] — https://en.wikipedia.org/wiki/Sick_AG

Registration date

Unknown — IEEE publishes none; any third-party "date registered" is a database artifact, not an IEEE record [Unknown] — IEEE MA-L (no date field)

Analyst note

A 00:06:77 address identifies genuine SICK hardware and, in an industrial/OT context, is expected; the same OUI on a general office/home LAN is anomalous. Treat SICK devices as actively-managed-but-CVE-bearing OT assets — track them in inventory and patch per PSIRT advisories.