Presentation from Defcon that explains the common vulnerabilities in SCADA systems. It also includes a PoC.

Slides Video