Zyxel Communications Corporation — 69 prefixes (MA-L)

Zyxel Communications Corporation holds 69 IEEE MA-L blocks, all registered to the exact organization string "Zyxel Communications Corporation" at the Hsinchu Science Park address (No. 6, Innovation Road II, Hsinchu, Taiwan). Zyxel (also branded Zyxel Networks) is a Taiwanese networking and broadband-equipment vendor founded in 1989, and its 69-block footprint reflects a broad hardware catalog: DSL/VDSL2 and LTE/5G customer-premises equipment (CPE), Wi-Fi routers and mesh systems, managed and unmanaged switches, wireless access points, business firewalls/UTM appliances, and IP telephony hardware. Consolidating all 69 MA-L rows under one vendor entry is more useful than minting near-identical per-prefix pages. The security context is genuinely load-bearing for anyone identifying a Zyxel device by MAC/OUI: legacy, end-of-life Zyxel DSL CPE has an active exploitation history — CVE-2024-40890 and CVE-2024-40891 (command injection, the latter incorporated into Mirai botnet strains observed in the wild) and CVE-2025-0890 (insecure default Telnet credentials, CVSS 9.8). Zyxel has stated it will not patch several affected end-of-life models and advises replacement rather than remediation, so a Zyxel OUI on an older DSL CPE is worth flagging for review. IEEE publishes no assignment dates for these blocks, so no registration date is recorded here.

IEEE assignment

69 prefixes → Zyxel Communications Corporation, registered Hsinchu Science Park, Taiwan (TW) [Confirmed] — IEEE MA-L

Registry / block size

MA-L only (24-bit OUI); 69 IEEE prefixes. No MA-M (28-bit) or MA-S/oui36 (36-bit) rows exist for this organization [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry. NOTE: IEEE public OUI data publishes NO assignment/registration date; any "date registered" on third-party lookup tools (e.g. maclookup.app showing 00:A0:C5 as 1998-04-22) is a database artifact, not an IEEE fact.

HQ / country

No. 6, Innovation Road II, Science Park, Hsinchu, Taiwan, TW 300 (registry address; 2 of 69 rows carry a minor punctuation/whitespace variant of the same address, not a distinct location) [Confirmed] — IEEE MA-L

Company status

active [Likely] — en.wikipedia.org/wiki/Zyxel, zyxel.com

Founded

1989 (founder Shun-I Chu) [Likely] — en.wikipedia.org/wiki/Zyxel

Device types

DSL/VDSL2 & LTE/5G broadband CPE, Wi-Fi routers & mesh systems, managed/unmanaged switches, wireless access points, firewalls/UTM appliances, IP telephony hardware [Likely] — zyxel.com/us/en-us/products

Notable products

WiFi 6 routers, DSL/VDSL2 and LTE/5G CPE, business firewalls (USG/ZyWALL line), managed switches

Verified sample prefixes (all MA-L, Zyxel Communications Corporation)

F8:0D:A9, 00:23:F8, 1C:74:0D, 00:A0:C5 [Confirmed] — IEEE MA-L

Security note

Legacy/EOL Zyxel DSL CPE has active exploited CVEs — CVE-2024-40890 (post-auth OS command injection, CVSS 8.8), CVE-2024-40891 (command injection; incorporated into Mirai botnet strains per Censys/GreyNoise), CVE-2025-0890 (insecure default Telnet credentials, CVSS 9.8). Zyxel declined to patch several EOL models and advises replacement.

[Confirmed] — cybersecuritydive.com, techcrunch.com, thehackernews.com

Analyst note

A Zyxel OUI on a globally-administered address identifies genuine Zyxel hardware; on older/EOL DSL CPE it warrants a security review given the active exploitation history. OUI alone does not identify the specific model.