Syrotech Networks. Ltd. — 3 prefixes (MA-L)
Summary
- // what this is
- Syrotech Networks is registered to MAC prefix
38:94:E0and 2 more in the IEEE OUI database. When a device's MAC address begins with38:94:E0, that block was registered by Syrotech Networks — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Three dedicated OUI blocks plus a corroborated, currently-selling FTTH product line indicate a real manufacturer, not a shell registration. Known CVEs against SY-GPON-1110-WDONT firmware make any Syrotech-branded router a candidate for firmware/credential review. Do not treat this registrant as the same company as GOIP Global Services Pvt. Ltd. absent further confirmation.
About this vendor.
A MAC address beginning with 38:94:E0, 54:47:E8, or 7C:A9:6B belongs to Syrotech Networks. Ltd., a Hong Kong-registered manufacturer whose hardware shows up almost exclusively on GPON/EPON fiber-to-the-home equipment: ONUs, ONTs, OLTs, and WiFi routers sold under the Syrotech brand to ISPs, mostly in the Indian FTTH market.
IEEE's the IEEE MA-L registry lists three separate MA-L (24-bit) blocks under the identical registrant name and Tuen Mun, Hong Kong address — a real substance signal, since a bare shell registration typically holds only one block. No MA-M or MA-S sub-allocations exist for this organization.
The Syrotech brand is corroborated independently across B2B trade listings (Alibaba, IndiaMART, TradeIndia, Volza export records) naming specific SKUs such as the SY-GPON-1110-WDONT router and SY-GPON-1000R-ONT. Two formally assigned CVEs (CVE-2024-41690, CVE-2024-41686) target the SY-GPON-1110-WDONT's firmware, alongside additional findings from a Redfoxsec advisory covering credential exposure, command injection, and CSRF.
One caveat worth flagging: the OUI registrant, "Syrotech Networks. Ltd." at a Hong Kong address, is a distinct legal entity from GOIP Global Services Pvt. Ltd. (Noida, India), which already holds a separate DONE OUI vendor entry in this repo and describes itself on its own site as having established the "Syrotech Networks" brand. No corporate filing was found confirming these are the same company or a parent/subsidiary pair, so the two OUI registrations are treated here as related but not merged.
- IEEE assignment
- 3 prefixes → Syrotech Networks. Ltd., registered Tuen Mun, Hong Kong [Confirmed] — the IEEE MA-L registry (keys MA-L 3894E0, MA-L 5447E8, MA-L 7CA96B)
- Registry / block size
- MA-L (24-bit OUI) × 3; no MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) entries found for this organization name [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry
- HQ / country
- UNIT NO.-5 20F, KIN WING INDUSTRIAL BUILDING, 33 KIN WING STREET, TUEN MUN, HONG KONG 999077 [Confirmed] — the IEEE MA-L registry
- Company status
- active, currently-selling FTTH/networking hardware brand (not a dormant/shell registration) [Likely] — syrotech.com, Alibaba/IndiaMART/Volza trade listings
- Device types
- GPON/EPON ONU, ONT, OLT, WiFi FTTH router, PoE/Ethernet switch, SFP/SFP+ transceiver, fiber PLC splitter [Likely] — syrotech.com, syrotech.com/fiber, alibaba.com, shop.cfnet.in
- Notable products
- SY-GPON-1000R-ONT, SY-GPON-1110-WDONT, SY-GPON-1110-2WDONT, GEPON-1000R-ONU [Likely] — alibaba.com, indiamart.com, shop.cfnet.in
- Verified sample prefixes (all MA-L, Syrotech Networks. Ltd.)
- 38:94:E0, 54:47:E8, 7C:A9:6B [Confirmed] — the IEEE MA-L registry
- Security context
- CVE-2024-41690 (plaintext credential storage, CVSS 4.6) and CVE-2024-41686 (weak password-policy enforcement, CVSS v4 7.3), both against SY-GPON-1110-WDONT firmware v3.1.02-231102; additional command-injection, CSRF, and default-Telnet-credential findings per a non-CVE Redfoxsec advisory [Likely] — securityvulnerability.io/vulnerability/CVE-2024-41690, github.com/advisories/GHSA-phh7-8q4v-gv55, redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-syrotech-router
- Entity relationship caveat
- shares the "Syrotech" brand name with vendor-goip-global-services-pvt (GOIP Global Services Pvt. Ltd., Noida, India — a separate IEEE registrant/address, already a DONE entry in this repo); no corporate filing found confirming a single legal entity or parent/subsidiary relationship[Likely] — syrotech.com/about, volza.com company profile, /mac/vendor/goip-global-services-pvt/
- Special note
- IEEE's public the IEEE MA-L registry publishes no registration date for any of the three prefixes; maclookup.app shows three different third-party "registered" dates per prefix under the same registrant, which are database-ingestion artifacts, not IEEE facts, and are not recorded here[Confirmed] — the IEEE MA-L registry, maclookup.app
- Related vendors
- GOIP Global Services Pvt. Ltd. (related "Syrotech" brand, separate OUI registrant; see caveat above)
- Analyst note
- Three dedicated OUI blocks plus a corroborated, currently-selling FTTH product line indicate a real manufacturer, not a shell registration. Known CVEs against SY-GPON-1110-WDONT firmware make any Syrotech-branded router a candidate for firmware/credential review. Do not treat this Hong Kong registrant as the same company as the separately-registered GOIP Global Services Pvt. Ltd. (Noida, India) absent further confirmation, even though both trade under the "Syrotech" name. [Likely]