MAC address vendor

Xirrus, Inc. — 3 prefixes (MA-L)

Primary prefix
00:0F:7D
Block
MA-L
Status
Acquired

Summary

// what this is
Xirrus is registered to MAC prefix 00:0F:7D and 2 more in the IEEE OUI database. When a device's MAC address begins with 00:0F:7D, that block was registered by Xirrus — the OUI identifies the maker of the network hardware, which is not always the brand on the device. Xirrus was acquired; the registration remains on record with IEEE.
// analyst note
Three separate OUI assignments, a documented acquisition trail (Riverbed 2017 to Cambium Networks 2019), named product and OS lines, and a vendor-specific CVE (CVE-2017-6557) together indicate genuine catalogued enterprise Wi-Fi hardware rather than a shell registration. A MAC on 00:0F:7D, 48:C0:93, or 50:60:28 indicates legacy or currently-supported Xirrus-branded Wi-Fi infrastructure.
[ 01 ] — Context

About this vendor.

Updated  ·  Confidence: High  ·  7 sources  ·  How this page is checked

A MAC address beginning 00:0F:7D, 48:C0:93, or 50:60:28 belongs to Xirrus, Inc., typically seen on enterprise Wi-Fi access points and "Wi-Fi Array" multi-radio hardware built for large-venue wireless deployments such as campuses, stadiums, and large offices rather than consumer gear.

Xirrus was founded in 2004 and based first in Westlake Village, California, then Thousand Oaks, California — the move is visible in the registry, where its oldest OUI (00:0F:7D) carries the Westlake Village address and its two newer blocks (48:C0:93, 50:60:28) carry Thousand Oaks. Riverbed Technology acquired Xirrus in April 2017, folding it into Riverbed's SD-WAN line; Riverbed then sold the Xirrus Wi-Fi business to Cambium Networks in August 2019, where the product line continues today.

Xirrus hardware shipped under the Wi-Fi AOS, Wi-Fi AOSLite, and Wi-Fi AOS FIPS operating systems, across catalogued models such as the XR-620, XR-630, XD4-130, X2-120, and XR-320 — Cambium Networks, the current owner, still names these models in its own security advisories for the legacy Xirrus line, which is strong corroboration that these OUIs map to real, supported enterprise access points rather than a bare registration.

Two sourced security items exist for the vendor's own products: CVE-2017-6557, a SQL injection in Xirrus ArrayOS before 9.4.0.135 (CVSSv3 8.8), and the 2021 "FragAttacks" family of 802.11 frame-aggregation flaws, which affected many vendors' implementations and were confirmed present on Xirrus Wi-Fi AOS/AOSLite/AOS-FIPS access points per Cambium's advisory.

Prefixes
00:0F:7D, 48:C0:93, 50:60:28 — three direct MA-L (/24) assignments
Registrant
Xirrus / Xirrus, Inc. / Xirrus Inc. (name and address formatting differs by assignment)
Company status
Acquired — Riverbed Technology (2017), then Cambium Networks (2019); product line active under Cambium
Also seen on
catalogued models named in a current Cambium Networks security advisory, including XR-620, XR-630, XD4-130, X2-120, and XR-320
Security history
CVE-2017-6557 (SQL injection, ArrayOS); FragAttacks-era 802.11 CVEs affecting Wi-Fi AOS/AOSLite/AOS-FIPS hardware
Shared-base status
None of these prefixes is a shared IEEE Registration Authority base — all three are direct assignments to Xirrus, so no sub-allocation caveat applies
IEEE assignment
3 MA-L prefixes → Xirrus / Xirrus, Inc. (name/address varies by block), registered Westlake Village, CA and Thousand Oaks, CA, US [Confirmed] — the IEEE MA-L registry (rows 000F7D, 48C093, 506028)
Registry / block size
MA-L (24-bit OUI); 3 IEEE prefixes found; no MA-M or MA-S sub-blocks located for Xirrus [Confirmed] — the IEEE MA-L registry, the IEEE MA-S registry, the IEEE MA-M registry. NOTE: these registry rows carry no assignment-date field; IEEE's public OUI data publishes no registration dates.
HQ / country
2101 Corporate Center Dr, Thousand Oaks, CA 91320, US (current registry address, two of three blocks); 310 North Westlake Blvd, Westlake Village, CA 91362, US (registry address on the oldest block, 00:0F:7D) [Confirmed] — the IEEE MA-L registry
Company status
Acquired by Riverbed Technology (April 2017), then sold by Riverbed to Cambium Networks (August 2019), where the Wi-Fi line continues [Confirmed] — businesswire.com, globenewswire.com
Device types
enterprise / high-density Wi-Fi access points, "Wi-Fi Array" multi-radio units for large-venue deployments [Confirmed] — networkworld.com, cambiumnetworks.com
Notable products
Wi-Fi Array (integrated radios, sectored directional antennas, multi-gigabit switch, controller, firewall, spectrum analyzer in one chassis); Wi-Fi AOS / AOSLite / AOS FIPS; named models incl. XR-620, XR-630, XD4-130, X2-120, XR-320 [Confirmed] — cambiumnetworks.com (security advisory 2021-02)
Verified sample prefixes (all MA-L)
00:0F:7D, 48:C0:93, 50:60:28 [Confirmed] — the IEEE MA-L registry
Special note
All three blocks are direct MA-L assignments to Xirrus, not sub-allocated from a shared IEEE Registration Authority base — no shared-base ownership caveat applies to these prefixes [Confirmed] — the IEEE MA-L registry
Related vendors
Cambium Networks (current owner of the Xirrus Wi-Fi line, since 2019); Riverbed Technology (previous owner, 2017-2019) [Confirmed] — globenewswire.com
Analyst note
Three separate OUI assignments, a documented acquisition trail (Riverbed 2017 to Cambium Networks 2019), named product/OS lines, and a vendor-specific CVE together indicate genuine catalogued enterprise hardware rather than a shell registration
[Confirmed] — businesswire.com, globenewswire.com, cambiumnetworks.com, nvd.nist.gov
[ 02 ] — OUI prefixes

Assignments by IEEE.

3
// registered prefixes3
  1. 00:0F:7DMA-L
  2. 48:C0:93MA-L
  3. 50:60:28MA-L
[ 03 ] — Related

Keep digging.