SigmaStar Technology Ltd. — 6 prefixes (5 MA-L + 1 MA-M)

SigmaStar Technology Ltd. (星宸科技股份有限公司; also registered as "Xiamen Sigmastar Technology Ltd.") is a fabless semiconductor company based in Xiamen, Fujian, China, founded in 2017 by a team originating from MStar Semiconductor and now publicly listed on the Shenzhen Stock Exchange (SZSE: 301536). It is an ARM silicon partner. Its IEEE OUI footprint is small but distinctive: five MA-L (24-bit) blocks — 00:9D:85, 24:14:07, 50:7B:91, D0:7C:B2, 14:C9:CF — plus one MA-M (28-bit) medium block, 60:95:CE:6. Two registry addresses appear across the assignments: the Tong'an District / HoZan Road address (CN 361100) carries four of the five MA-L blocks and is the likely current primary, while the Xiamen Software Park / Chuangxin Building address (CN 361005) carries the earlier 24:14:07 MA-L and the MA-M block. The practical caveat for any SigmaStar OUI work: SigmaStar sells SoCs, not finished devices. A MAC bearing one of these prefixes belongs to an end-product — an IP camera, USB webcam, NVR/DVR, dash cam, action cam, or smart-home/robotics device — built by some other brand around a SigmaStar chip, not to a "SigmaStar" branded product. That OEM layering also shapes the security picture: two public CVEs (CVE-2026-8598 on the SSC335, CVE-2025-4371 on the SSC9351D) trace to OEM firmware on SigmaStar silicon rather than to the silicon itself, and some SigmaStar lines hold PSA Certified Level 1 status. No IEEE registration date is published for any of these blocks; third-party "date registered" timestamps are database artifacts, not IEEE facts.

IEEE assignments

6 prefixes → 5× MA-L (00:9D:85, 24:14:07, 50:7B:91, D0:7C:B2, 14:C9:CF) + 1× MA-M (60:95:CE:6) [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry (the cached registry snapshots)

Registry / block sizes

MA-L (24-bit) and MA-M (28-bit medium block); no MA-S (36-bit) entries found [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date (columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools (e.g. maclookup.app reporting "23 August 2021") is a database artifact, not an IEEE fact.

Org names

registered as both "Sigmastar Technology Ltd." and "Xiamen Sigmastar Technology Ltd."; Chinese 星宸科技股份有限公司 [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry; https://www.arm.com/partners/catalog/sigmastar

HQ / country

Xiamen, Fujian, China (CN). Primary registry address No. 1, HoZan Road, Tong'an District, Xiamen, CN 361100; secondary 15th Floor, Unit A, Chuangxin Building, Software Park, Xiamen Torch Hi-Tech Industrial Development Zone, CN 361005 [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry

Company status / profile

active; fabless semiconductor company founded 2017 by ex-MStar engineers; publicly listed SZSE: 301536 [Confirmed] — https://stockanalysis.com/quote/she/301536/company/, https://uk.finance.yahoo.com/quote/301536.SZ/profile/, https://www.arm.com/partners/catalog/sigmastar

Device types

SoCs embedded in IP cameras, USB webcams, NVR/DVR recorders, dash cams / vehicle cameras, action cameras, smart-home devices, robotics. SigmaStar is the chip vendor, not the end-device brand [Confirmed] — https://www.arm.com/partners/catalog/sigmastar, https://products.psacertified.org/products/sigmastar-sav5xx-sav6xx-ssc37x-ssu939x-product-family

Chip families

SSC series (SSC30KD, SSC30KQ, SSC335, SSC37X), SSA series (SSA530G), SAV5XX/SAV6XX, SSU939X, SSC9351D; ARM Cortex-A53-based with ISP, NPU/IPU, H.264/H.265 codec blocks [Confirmed] — https://www.cctv.supplies/sigmastar-mstar-ssc30kd-ssc30kq-high-integrated-ip-camera-soc-processor/, http://linux-chenxing.org/misc/SSA530G.pdf

Website

https://www.sigmastar.com.cn (consistent across third-party sources and ARM partner listing; direct fetch blocked by a TLS cert issue) [Likely] — https://www.arm.com/partners/catalog/sigmastar

Security context

CVE-2026-8598 (unauthenticated config export exposing credentials) on ZKTeco CCTV cameras running firmware on the SigmaStar SSC335 SoC, with 7+ additional brands sharing the firmware; CVE-2025-4371 (absent firmware signature validation, fixed in 4.8.0) on Lenovo 510/Performance FHD webcams using the SSC9351D SoC. Both are OEM-firmware flaws layered over the chip. SigmaStar's SAV5XX/SAV6XX/SSC37X/SSU939X family holds PSA Certified Level 1 v2.2 (issued 2023-05-31), indicating TrustZone/Secure Boot/crypto support in silicon [Confirmed] — https://gbhackers.com/linux-webcams-weaponized/, https://products.psacertified.org/products/sigmastar-sav5xx-sav6xx-ssc37x-ssu939x-product-family

Registration date

Unknown — IEEE publishes none; not recorded [Confirmed null] — IEEE the IEEE MA-L registry/mam.csv contain no date column

Analyst note

a SigmaStar OUI on a globally-administered address identifies a device built around a SigmaStar SoC (overwhelmingly IP cameras and other surveillance/IoT hardware), not a SigmaStar-branded product. Treat such a prefix as a strong "IoT/surveillance SoC" signal for asset classification, and pair it with firmware/CVE checks given the documented OEM-firmware issues.