Ugreen Group Limited — 4 prefixes (2× MA-L, 2× MA-M)

Ugreen Group Limited holds four MAC address block assignments in the cached IEEE registries: two MA-L 24-bit OUI blocks (6C:1F:F7 and EC:1A:C3) and two MA-M 28-bit blocks (98:6E:E8:2 and E0:23:3B:E). All four rows carry an identical registered address in Shenzhen's Longhua District, Guangdong, China. UGREEN is a Shenzhen-based consumer-electronics maker founded in 2012 by Zhang Qingsen and publicly listed on the Shenzhen Stock Exchange (301606.SZ) since 2024; it sells charging hardware, USB hubs, audio/video peripherals, and — most relevant to MAC-address work — network-attached storage. The MAC-bearing devices most likely to surface these prefixes are the NASync DXP-series NAS units (DXP2800, DXP4800, DXP4800 Plus/Pro, DXP8800 Plus, DXP GT variants), which ship with 2.5GbE and 10GbE networking, plus USB docking stations and USB-to-Ethernet adapters. Two 2025 CVEs affect the separate DH2100+ NAS firmware branch — CVE-2025-14188 (remote command injection in the file-backup endpoint, CVSS 7.3, vendor unresponsive to disclosure) and CVE-2025-14693 (a symlink-following flaw in the USB handler requiring physical access). UGREEN runs a formal vulnerability-disclosure portal, a positive structural signal. As always for OUI work, IEEE publishes no registration dates; any "date registered" shown by third-party aggregators for these prefixes is a database artifact, not an IEEE fact.

IEEE assignment

4 prefixes → Ugreen Group Limited, registered Shenzhen, Guangdong, CN [Confirmed] — the IEEE MA-L registry (lines 14567, 23357), the IEEE MA-M registry (lines 2430, 2784)

Registry / block classes

2× MA-L (24-bit OUI: 6C:1F:F7, EC:1A:C3) + 2× MA-M (28-bit: 98:6E:E8:2, E0:23:3B:E); no MA-S/oui36 assignment [Confirmed] — IEEE the IEEE MA-L registry / the IEEE MA-M registry

HQ / country

4F, Plant 6, 1F-6/F, Block 7, YuAn Zone, Gaofeng Community, Dalang Street, Longhua District, Shenzhen, Guangdong, CN 518109 [Confirmed] — IEEE registry rows (identical across all 4 blocks); corporate HQ Shenzhen, Guangdong, China [Confirmed] — ugreen.com/pages/about-ugreen

Company status

active; publicly listed on Shenzhen Stock Exchange (301606.SZ) since 2024 [Confirmed] — ugreen.com/pages/about-ugreen, en.wikipedia.org/wiki/Ugreen, finance.yahoo.com/quote/301606.SZ/profile/

Founded

2012 by Zhang Qingsen [Confirmed] — en.wikipedia.org/wiki/Ugreen, ugreen.com/pages/about-ugreen

Device types (MAC-bearing)

NAS (NASync DXP series — DXP2800, DXP4800, DXP4800 Plus/Pro, DXP8800 Plus, DXP GT); USB docking stations/hubs with network ports; USB-to-Ethernet adapters [Confirmed] — nas.ugreen.com/collections/ugreen-nasync-dxp-series, amazon.com/dp/B0D22HBFK1

Network capabilities

NAS line ships 2.5GbE (DXP2800), dual 2.5GbE (DXP4800), 10GbE+2.5GbE (DXP4800 Plus/Pro), dual 10GbE (DXP8800 Plus), 10GbE (DXP GT) [Confirmed] — nas.ugreen.com/pages/compare

OUI prefixes per third-party aggregator

6C:1F:F7, 98:6E:E8:2, E0:23:3B:E, EC:1A:C3 [Likely — aggregator-reported, but all four independently confirmed in cached IEEE registries] — maclookup.app/vendors/ugreen-group-limited

Allocation date

Unknown [Unknown] — IEEE publishes no registration dates in the IEEE MA-L registry/mam.csv/oui36.csv. Aggregators (maclookup.app, udger.com) report 2021-08-03 as the earliest entry, but this is a third-party database artifact, NOT an IEEE fact — do not display as an IEEE registration date.

Security context

2 disclosed 2025 CVEs on the DH2100+ NAS firmware branch (distinct from DXP consumer line) — CVE-2025-14188 (remote command injection in /v1/file/backup/create, ≤5.3.0.251125, CVSS 7.3 High, vendor unresponsive to disclosure) and CVE-2025-14693 (symlink-following in USB handler, requires physical access, ≤5.3.0)

[Confirmed] — github.com/advisories/GHSA-53pv-jqh6-g9j5, cvedetails.com/cve/CVE-2025-14693/

Security posture

vendor did not respond to the command-injection disclosure (negative coordinated-disclosure signal); a formal vulnerability-disclosure page + submission portal exists (positive structural signal); no bug-bounty program found [Likely] — nas.ugreen.com/pages/vulnerability-disclosure

Website

https://www.ugreen.com/ (main brand); https://nas.ugreen.com/ (NAS, US); https://nas-eu.ugreen.com/ (NAS, EU) [Confirmed] — ugreen.com, nas.ugreen.com

Analyst note

a globally-administered UGREEN OUI on a fixed-MAC device (NAS, dock, USB-Ethernet adapter) reliably identifies genuine UGREEN hardware. UGREEN does not appear to ship Wi-Fi clients with MAC randomization in the way phone vendors do, so OUI match is dependable for these device classes.