UNIWAY INFOCOM PVT LTD — 48:93:DC (MA-L)

The OUI prefix 48:93:DC is registered to "UNIWAY INFOCOM PVT LTD" at Block C 9/4, Wazirpur Industrial Area, New Delhi, Delhi, IN 110052 — a single IEEE MA-L (24-bit) block covering roughly 16.7 million addresses, present in the IEEE the IEEE MA-L registry but not in the MA-M or MA-S files. The assignee is Uniway Infocom, an Indian telecom-equipment company (brand "Uniway," established 2014, New Delhi) that builds and imports last-mile fiber hardware: GPON/XPON/EPON optical network terminals and units (UW-101X, UW-301VPW, UW-302VP, UW-311VPW, UW-323DAC), GPON/GEPON OLTs (UW-4PON-L3, UW-8GPON-L3, UW-16PON-L3), PoE and L2/L3 managed switches, Wi-Fi routers, and fiber test gear (OTDRs, splicers, VFLs), carrying Indian BSNL/TEC and MTCTE approvals. Devices use VSOL and Realtek chipsets, some OEM-imported from China, and the firmware web UI runs on a CGI/BoaServer stack. For analysts, the load-bearing caveat is security posture: three public CVEs were disclosed against Uniway router firmware ≤ 2.0 in late 2023 — CVE-2023-7092 (CSRF in UW-302VP), CVE-2023-7209 (unauthenticated remote device reset / DoS, CVSS 7.5), and CVE-2023-7211 (authentication bypass via IP-based auth, CVSS 8.1) — all remotely exploitable with no authentication, with public exploits and no vendor patch or response. These are consumer/ISP-edge GPON/ONU devices deployed mainly in India for FTTH, so an in-the-wild 48:93:DC address on an exposed management interface warrants scrutiny.

IEEE assignment

48:93:DC → UNIWAY INFOCOM PVT LTD, registered New Delhi, Delhi, IN [Confirmed] — IEEE MA-L (row MA-L,4893DC,UNIWAY INFOCOM PVT LTD,...)

Registry / block size

MA-L (24-bit OUI), ~16.7M addresses; this assignee holds the single block 48:93:DC. Found in the IEEE MA-L registry (MA-L) only — not in the IEEE MA-M registry (MA-M) or the IEEE MA-S registry (MA-S). [Confirmed] — IEEE MA-L / the IEEE MA-L registry. NOTE: IEEE's public OUI data publishes NO assignment/registration date (the IEEE MA-L registry columns are only Registry, Assignment, Organization Name, Organization Address); any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

Block C 9/4, Wazirpur Industrial Area, New Delhi, Delhi 110052, IN (IEEE registry address; company also lists #9/4, 2nd Floor, Block-C, Wazirpur, and 3A, Big Jos Tower, Netaji Subhash Place, Wazirpur, Delhi 110034) [Confirmed] — IEEE MA-L; uniwayinfo.in/about-us.html

Company status

active; proprietorship established 2014, GST 07ANQPA8825J1ZM, CEO Piyush Arora, 26–50 employees; operates as manufacturer + importer + trader [Confirmed] — uniwayinfo.in/about-us.html

Device types

GPON/XPON/EPON ONT/ONU (UW-101X, UW-301VPW, UW-302VP, UW-311VPW, UW-323DAC), GPON/GEPON OLTs (UW-4PON-L3, UW-8GPON-L3, UW-16PON-L3), PoE and L2/L3 managed switches, Wi-Fi routers, fiber test equipment (OTDRs, splicers, VFLs)

[Confirmed] — uniwayinfo.com/collections/networking-product; indiamart.com (UW-323-DAC)

Notable products

UW-323DAC ONT (Realtek chipset); UW-301VPW (VSOL chipset); BSNL/TEC + MTCTE-approved FTTH hardware; firmware web UI on BoaServer/CGI [Confirmed] — wisdomshop.in/uniway-301vpw-vsol-chipset; nvd.nist.gov/vuln/detail/CVE-2023-7209

Verified sample prefixes (MA-L, UNIWAY INFOCOM PVT LTD)

48:93:DC [Confirmed] — IEEE MA-L. (Single block; no other Uniway prefix surfaced in third-party MAC databases — see analyst note.)

Security note

three public CVEs vs. Uniway router firmware ≤ 2.0, reported via VulDB late 2023 / published Jan 2024, vendor non-responsive, all unauthenticated + remotely exploitable with public exploits: CVE-2023-7092 (CSRF, UW-302VP, wlan_basic_set.cgi); CVE-2023-7209 (DoS via /boaform/device_reset.cgi remote reset, CVSS 3.1 7.5 HIGH, CWE-404; affects UW-101X/301VPW/302VP/311VPW/323DAC); CVE-2023-7211 (auth bypass via IP-address-based auth in admin web UI, CVSS 3.1 8.1 HIGH, same models). No vendor patch or advisory issued.

[Confirmed] — nvd.nist.gov/vuln/detail/CVE-2023-7209; nvd.nist.gov/vuln/detail/CVE-2023-7211; vuldb.com/?id.248939

Related vendors

VSOL and Realtek (chipset suppliers; OEM imports from China and other origins) [Likely] — wisdomshop.in/uniway-301vpw-vsol-chipset; uniwayinfo.in/about-us.html

Analyst note

R1 (IEEE registry) confirms 48:93:DC → UNIWAY INFOCOM PVT LTD directly from the IEEE MA-L registry; W1 (web) independently confirms the company, address, and product line but could NOT find an OUI prefix for "Uniway" in third-party MAC databases (maclookup.app, macaddress.io, aruljohn.com) and hit HTTP 418 on the IEEE flat file — that is a non-confirmation, not a refutation, so the registry match stands. Treat a globally-administered 48:93:DC address as genuine Uniway FTTH/ONU hardware; given the open CVEs, an exposed Uniway management interface is a meaningful security signal.