The best attack vector would probably be engineers or maintenance laptops which are connected to the aircraft control systems for diagnostic, repair and upgrades - similar to how Stuxnet worked.

(P.S - Hi! Long Time Lurker, first time poster)