Verifone, Inc. — 8 prefixes (5 MA-L + 3 MA-M)

Verifone holds a modest, mixed OUI footprint: five MA-L (24-bit) blocks registered to "Verifone, Inc." at U.S. addresses (San Jose, Santa Clara, and Coral Springs, Florida), plus three MA-M (28-bit) blocks registered to the Chinese subsidiary "VeriFone Systems (China), Inc." in Fuzhou, Fujian. Verifone is one of the world's larger payment-terminal and point-of-sale (POS) hardware manufacturers — founded 1981 in Hawaii, headquartered in San Jose, California, and operating across 150+ countries. The blocks back a security-relevant device class: countertop and multilane POS terminals, PIN pads, portable/mobile (mPOS) units, unattended kiosk terminals, and petroleum/fuel-dispenser controllers (the Commander site-controller line). Because these devices handle cardholder data, a Verifone OUI on a network is a strong signal of payment-processing hardware and a correspondingly high-value target. The vendor's terminal lines have a documented vulnerability history (Positive Technologies disclosed eight high-severity CVEs in 2019 across the MX, VX, and UX families, CVSS up to 8.8, patched via firmware in 2020), and the lineup carries PCI PTS certification. As with all OUI work, no registration date is recorded: IEEE publishes none for MAC/OUI allocations, and the per-prefix dates shown by third-party lookup tools are database artifacts, not first-party facts.

IEEE assignment (MA-L)

5 blocks → Verifone, Inc. — 00:0B:4F, 60:C7:98, 88:BF:35, A4:60:11, E8:05:DC, registered at U.S. addresses (San Jose / Santa Clara, CA; Coral Springs, FL) [Confirmed] — IEEE MA-L

IEEE assignment (MA-M)

3 blocks → VeriFone Systems (China), Inc. — 50:FA:CB:8, 18:C3:F4:6, C8:2C:2B:8, registered in Fuzhou, Fujian, CN; entity name spelling varies across rows ("VeriFone Systems(China),Inc" / "Verifone Systems (China),lnc.") [Confirmed] — IEEE MA-M

Registry / block sizes

5 × MA-L (24-bit OUI) + 3 × MA-M (28-bit) + 0 × MA-S [Confirmed] — IEEE registry source files. NOTE: IEEE's public OUI/MA data publishes NO assignment/registration date; any "date registered" on third-party tools is a database artifact, not an IEEE fact.

HQ / country

US (Verifone, Inc., San Jose, CA — HQ); CN (subsidiary VeriFone Systems (China), Inc., Fuzhou) [Confirmed] — IEEE registry addresses; verifone.com

Company status

active [Confirmed] — verifone.com

Canonical org name

"Verifone, Inc." (brand normalized "VeriFone") [Confirmed] — IEEE MA-L; verifone.com

Website

https://www.verifone.com [Confirmed] — verifone.com

Device types

payment terminals and POS hardware — countertop terminals, PIN pads, multilane terminals, portable/mobile (mPOS) units, unattended kiosk terminals, petroleum/fuel-dispenser controllers, and Commander-series site controllers [Confirmed] — verifone.com (hardware overview / products)

Company background

founded 1981 in Hawaii by William Melton; held >53% of the U.S. POS market by the late 1980s; operates in 150+ countries [Confirmed] — en.wikipedia.org/wiki/Verifone; fundinguniverse.com

Registration date

Unknown — IEEE publishes no OUI/MA registration dates; third-party per-prefix dates are database artifacts and are not recorded here [Unknown] — IEEE (no date column)

IANA reference

not applicable to OUI/MAC vendor entries; field stays blank [Confirmed] — n/a

Security context

Positive Technologies disclosed 8 high-severity CVEs in 2019 (CVE-2019-14711 … CVE-2019-14719, CVSS 6.3–8.8) affecting MX/VX/UX terminal families; vectors required physical access (default passwords, buffer overflows, insecure reset, PIN interception); patched via firmware in 2020

[Confirmed] — global.ptsecurity.com; cvedetails.com/vendor/12476/Verifone.html

PCI compliance

terminal lineup pursues PCI PTS certification; the V660p holds PCI PTS v7 certification; PCI mandated an urgent global Verifone-terminal update in Nov 2020 following the 2019 disclosures [Confirmed] — verifone.com (PCI PTS v7 V660p); bankinfosecurity.com

Analyst note

a Verifone OUI on a network strongly indicates networked POS / payment hardware — a security-relevant device class handling cardholder data. The MA-M (China subsidiary) blocks are 28-bit shared allocations, so the same OUI prefix may be split among multiple assignees; resolve the full 28-bit boundary before attributing an MA-M address.