ICS / OTUDP 47808 Cleartext by default
Port 47808: BACnet
BACnet/IP
Building automation: HVAC, lighting, access control. Usually no authentication.
How attackers abuse it
- Building systems reachable from corporate or internet networks.
How to defend it
- Separate building-management networks; BACnet Secure Connect where supported.
Exam tip
Building management systems are OT too, and often the least monitored part of the estate.