OT vulnerability management using an OT/ICS asset management system