OT vulnerability management