[katzenversteher]

In general the whole industrial and SCADA world is pretty endangered from my experience. They are ususually very conservative which often means the SCADA stations are stuck to very old OS Versions (often Windows or even DOS).

One reason is OPC DA, a legacy communication protocol based on DCOM. Another is that at least some of the operator stations are often also used as engineering station, so they have to support the controller engineering software for the often also ancient PLCs.

As long as nothing is connected or exposed to the internet that's fine but nowadays companies try use edge computing and machine learning and so on to optimize running costs. Also predictive maintenance etc. is used to automatically trigger service when e.g. vibration sensors show patterns that indicate damage (e.g. bearing damage).