How an Emerging Industrial Protocol Family Could Put OT at Risk

Researchers demonstrated at Black Hat that weaknesses in CC-Link IE TSN and certain TSN switch management interfaces can be abused to inject seemingly legitimate scheduled traffic, allowing manipulation of industrial process variables (e.g., robotic arms, synchronization clocks). The work involved reverse-engineering timing behavior, exploiting Phoenix Contact switch bugs to reach process ports via the management interface, and produced a CISA advisory; mitigations include firmware updates, network segregation, and exploration of cryptographic protections for TSN.