VIVAVIS AG — 2 prefixes (MA-L)

A MAC address beginning A4:D0:94 or 00:12:AD identifies hardware from VIVAVIS AG, a German vendor of critical-infrastructure technology for energy and water utilities. Both are full 24-bit MA-L OUI blocks registered to the same company at the same Ettlingen, Germany address, and typically appear on SCADA grid-control equipment, remote automation terminals, or smart meter gateways rather than consumer or general enterprise IT devices.

VIVAVIS AG was formed in August 2020 by merging VIVAVIS GmbH, Erwin Peters Systemtechnik GmbH, GORLITZ AG, and IDS GmbH. Its operating lineage traces to IDS GmbH, founded in 1975 as an early European provider of remote-control technology for utility networks; VIVAVIS GmbH itself was the renamed IDS-Gruppe Holding GmbH as of May 2019.

The current product line covers HIGH-LEIT SCADA and grid-control software, ACOS remote terminal units, and a family of smart meter gateway and meter-data-management platforms (the IDSpecto line, Skalar.pro) with Controllable Local System support. Legacy brand GORLITZ AG is credited with introducing one of the first smart meter gateways for the German market.

One confirmed vulnerability, CVE-2024-38456, affects VIVAVIS's HIGH-LEIT SCADA software: an incorrect-permission flaw in its install service (prunsrv.exe) lets a logged-on, non-privileged Windows user escalate to SYSTEM. VIVAVIS shipped a patch for HIGH-LEIT 4 and GPO-based mitigations for HIGH-LEIT 5. As of an August 2026 search, no other CVE names a VIVAVIS product.

Registry class

MA-L (24-bit OUI) — two independent full blocks

Headquarters

Ettlingen, Baden-Württemberg, Germany

Device class

SCADA/grid-control systems, remote terminal units, smart meter gateways

Industry

Energy and water utility critical infrastructure

IEEE assignment

2 prefixes → VIVAVIS AG, registered Ettlingen, Baden-Württemberg, DE [Confirmed] — the IEEE MA-L registry A4D094, the IEEE MA-L registry 0012AD

Registry / block size

MA-L (24-bit OUI); holds 2 IEEE prefixes; no MA-S or MA-M rows found for this company [Confirmed] — the IEEE MA-L registry A4D094, the IEEE MA-L registry 0012AD

HQ / country

Nobelstraße 18, Ettlingen, Baden-Württemberg, DE (the two registry rows show postal codes 76375 and 76275 for the same street address; Ettlingen's actual postal code is 76275, so 76375 is likely a transcription artifact in one IEEE row)

[Confirmed] — the IEEE MA-L registry A4D094, the IEEE MA-L registry 0012AD

Company status

active, privately held [Likely] — https://www.vivavis.com/en/about/vivavis-at-a-glance/, https://de.wikipedia.org/wiki/Vivavis

Legal registration

District Court of Mannheim, HRB 737454 [Confirmed] — https://www.northdata.com/VIVAVIS%20AG,%20Ettlingen/Amtsgericht%20Mannheim%20HRB%20737454

Device types

SCADA/grid-control (HIGH-LEIT), remote terminal units (ACOS), smart meter gateways with CLS support (IDSpecto family), Smart Grid Operation Platform (SGOP) [Confirmed] — https://www.vivavis.com/en/sector/metering-en/controllable-local-system-cls/, https://www.vivavis.com/en/solution/metering-en/idspecto-dayos/

Notable products

HIGH-LEIT, ACOS, IDSpecto.DAYOS, IDSpecto.CLS-Operator, IDSpecto.ADMIN, Skalar.pro, SGOP [Confirmed] — https://www.vivavis.com/en/about/vivavis-at-a-glance/

Verified sample prefixes (both MA-L, VIVAVIS AG)

A4:D0:94, 00:12:AD [Confirmed] — the IEEE MA-L registry A4D094, the IEEE MA-L registry 0012AD

Corporate history

formed August 2020 by merger of VIVAVIS GmbH, Erwin Peters Systemtechnik GmbH, GORLITZ AG, and IDS GmbH; VIVAVIS GmbH was the renamed IDS-Gruppe Holding GmbH (May 2019); traces to IDS GmbH, founded 1975 [Likely] — https://de.wikipedia.org/wiki/Vivavis, https://www.pressebox.de/pressemitteilung/ids-gmbh/Die-GOeRLITZ-AG-hat-einen-neuen-Gesellschafter/boxid/436104

Security context

CVE-2024-38456 (CWE-732 incorrect permission assignment) in HIGH-LEIT's prunsrv.exe / HL-InstallService — CVSS v3.1 7.8 HIGH; local privilege escalation to NT AUTHORITY\SYSTEM; patched for HIGH-LEIT 4 (4.25.01.02), GPO mitigation issued for HIGH-LEIT 5. As of an August 2026 search, no other CVE names a VIVAVIS product. [Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2024-38456, https://www.vivavis.com/en/vivavis-high-leit-rce-vulnerability-cve-2024-38456/

IANA reference

none applies to these OUI registry rows [Confirmed] — n/a

Special note

IEEE's public the IEEE MA-L registry publishes no assignment/registration date for A4:D0:94 or 00:12:AD; no date is asserted for either block on this page [Confirmed] — the IEEE MA-L registry A4D094, the IEEE MA-L registry 0012AD

Related vendors

GORLITZ AG, Erwin Peters Systemtechnik GmbH, IDS GmbH (all merged into VIVAVIS AG, August 2020) [Likely] — https://de.wikipedia.org/wiki/Vivavis

Analyst note

Both A4:D0:94 and 00:12:AD are full MA-L blocks registered exclusively to VIVAVIS AG, not slices of a shared IEEE administrator pool. Either prefix on a utility, municipal, or industrial network is consistent with VIVAVIS's grid-control, remote-automation, or smart-metering installed base

[Likely] — https://www.vivavis.com/en/about/vivavis-at-a-glance/