Signify B.V. — 4 prefixes (MA-L)

Signify B.V. holds four MA-L (OUI-24) blocks split across two registered entity names that are the same company before and after a corporate rename: C4:29:96 and FC:26:8C are registered to "Signify B.V." and 00:17:88 and EC:B5:FA to the legacy name "Philips Lighting BV," both at the Eindhoven High Tech Campus in the Netherlands. Signify is the world's largest lighting company by revenue (Euronext Amsterdam: LIGHT); it was spun off from Philips in 2016 and renamed from Philips Lighting to Signify in 2018, retaining a licence to the Philips brand on lighting products. The hardware behind these OUIs is overwhelmingly consumer smart-home lighting: the Philips Hue line — smart LED bulbs, light strips, luminaires, and the Hue Bridge — plus WiZ Wi-Fi bulbs and Color Kinetics architectural systems. The Hue Bridge is the device class most often seen on a network because it takes an Ethernet port and therefore shows up in ARP/DHCP tables, relaying ZigBee to bulbs and acting as a local Matter/HomeKit controller. Two security caveats matter for asset work. First, OUI alone is weak evidence: MAC prefixes are trivially spoofable, so a Signify OUI is a hint, not proof, for inventory or MAC-based access control. Second, Hue and Philips smart-lighting devices carry a documented CVE history — a ZigBee RCE on the bridge (CVE-2020-6007, patched), plain-text Wi-Fi credential storage in Wi-Fi bulb lines (CVE-2024-9991, patched in firmware v1.33.1), and HomeKit-handshake auth-bypass/RCE on Hue Bridge V2 (CVE-2026-3556 / CVE-2026-3558) — so an unpatched, reachable bridge is a meaningful lateral-movement risk. Signify is a Dutch company and is not on NDAA Section 889 banned-vendor lists.

IEEE assignment

4 MA-L prefixes across two registered names — C4:29:96 and FC:26:8C ("Signify B.V."), 00:17:88 and EC:B5:FA ("Philips Lighting BV"); all the same entity post-2018 rename [Confirmed] — IEEE MA-L (enrichment/registries/oui.csv: rows C42996, FC268C, 001788, ECB5FA)

Registry / block size

MA-L (24-bit OUI); 4 blocks, ~67.1M addresses combined; no MA-M or MA-S allocations found [Confirmed] — enrichment/registries/oui.csv, mam.csv, oui36.csv. NOTE: IEEE's public OUI data publishes NO assignment/registration date (oui.csv columns are only Registry, Assignment, Organization Name, Organization Address). Third-party tools (e.g. maclookup.app) show "First registration: 08 April 2006 / Last updated: 26 July 2017" for the Philips Lighting BV blocks, but those are database artifacts of unknown provenance, not IEEE facts.

HQ / country

Eindhoven High Tech Campus, Eindhoven, Noord-Brabant 5656 AE, Netherlands (NL). IEEE rows carry two campus numbers — High Tech Campus 7 (Signify B.V.) and High Tech Campus 45 (Philips Lighting BV); the corporate LEI record lists High Tech Campus 48. All are the same Eindhoven campus. [Confirmed] — enrichment/registries/oui.csv, https://opencorpdata.com/lei/549300CWT9ZK2HACHG48

Company status

active; Signify N.V. (Euronext: LIGHT), the world's largest lighting company by revenue; spun off from Philips in 2016, renamed Philips Lighting → Signify in 2018 [Confirmed] — https://en.wikipedia.org/wiki/Signify_N.V., https://www.signify.com

Device types

smart-home lighting and IoT — Philips Hue (smart bulbs, light strips, luminaires, Hue Bridge), WiZ Wi-Fi bulbs, Color Kinetics architectural LED lighting. The Hue Bridge (Ethernet-connected ZigBee/Matter hub) is the OUI-bearing device most often seen on a network. [Likely] — https://en.wikipedia.org/wiki/Philips_Hue, https://www.signify.com, https://huetips.com/help/how-to-find-my-hue-bridge-mac-address/

Notable products

Philips Hue Bridge (ZigBee + Ethernet, Matter-compatible since 2023), Hue Bridge Pro (announced 2025), Philips Hue bulbs and accessories, WiZ Wi-Fi smart lighting, Color Kinetics systems [Confirmed] — https://en.wikipedia.org/wiki/Philips_Hue, https://appleinsider.com/articles/25/09/04/signify-announces-massive-new-lineup-of-hue-smart-lights-new-bridge-pro-at-ifa-2025

Verified prefixes (all MA-L)

C4:29:96 ("Signify B.V."), FC:26:8C ("Signify B.V."), 00:17:88 ("Philips Lighting BV"), EC:B5:FA ("Philips Lighting BV") [Confirmed] — enrichment/registries/oui.csv

Special note

the two registered entity names ("Signify B.V." and "Philips Lighting BV") reflect the 2018 corporate rename — all four prefixes belong to one organisation. Devices carrying these OUIs are primarily consumer smart-home equipment that typically sits on residential or guest segments. [Confirmed] — https://en.wikipedia.org/wiki/Signify_N.V.

Security note

CVE-2020-6007 (ZigBee heap overflow → RCE on Hue Bridge; disclosed Nov 2019, patched fw 1935144040); CVE-2024-9991 / CIVN-2024-0329 (CERT-In, Oct 2024, High — plain-text Wi-Fi credential storage, weak setup checksum, AES-128-CBC flaws in Philips Smart Wi-Fi LED Batten/Bulb; patched fw v1.33.1); CVE-2026-3556 / CVE-2026-3558 (auth-bypass + RCE on Hue Bridge V2 via HomeKit pair-setup on TCP 8080, adjacent network, no auth). Not on NDAA Section 889 lists; no CISA KEV advisory names Signify OUI-level hardware. [Confirmed] — https://blog.checkpoint.com/security/the-dark-side-of-smart-lighting-check-point-research-shows-how-business-and-home-networks-can-be-hacked-from-a-lightbulb/, https://thecyberexpress.com/vulnerabilities-in-philips-smart-lighting/, https://www.sentinelone.com/vulnerability-database/cve-2026-3558/, https://www.sentinelone.com/vulnerability-database/cve-2026-3556/

Related vendors

Philips (brand licensor for lighting products); WiZ (acquired 2019, Signify subsidiary); Color Kinetics (Signify brand) [Confirmed] — https://en.wikipedia.org/wiki/Signify_N.V.

Analyst note

MAC OUIs are trivially spoofable, so a Signify OUI is a hint, not proof, for asset inventory or MAC-based access control. Devices are mostly consumer smart-home gear (Hue Bridge + bulbs); their CVE history makes an unpatched, attacker-reachable bridge a meaningful lateral-movement risk.