Vulnerability Assessment of Operational Technology Systems in Industry 4.0 Manufacturing Environments

Abstract

The increasing convergence of Information Technology (IT) and Operational Technology (OT) under the Industry 4.0 paradigm has significantly expanded the cyberattack surface of industrial environments, making the manufacturing sector one of the most frequently targeted industries. This study investigates cybersecurity vulnerabilities in a brownfield OT environment that integrates legacy industrial assets with modern connected technologies. A vulnerability assessment was conducted using a grey-box testing methodology, which provides partial knowledge of the target infrastructure while accurately reflecting the security perspective of an internal assessment. Automated reconnaissance and vulnerability scanning were performed using tools available in the Kali Linux distribution, including Nmap, Nikto, and Wifite, to identify security weaknesses and potential attack paths across the OT network. The assessment revealed multiple vulnerabilities that could be exploited to compromise the confidentiality, integrity, and availability of industrial systems, highlighting the need for systematic security evaluation and risk-based remediation. Although individual vulnerability assessment tools have been widely studied, limited research has examined their integrated application in contemporary brownfield OT environments that combine legacy operational infrastructure with Industry 4.0 technologies. The principal contribution of this work is the adaptation and validation of an established vulnerability assessment methodology in a real-world industrial production environment. Additionally, the study demonstrates a transparent approach for quantifying cyber risk and prioritizing remediation actions, providing practical guidance for strengthening the cybersecurity posture of manufacturing organizations undergoing digital transformation.