Cyber-physical systems are safety and securitycritical because of their close interactions with humans and the environment. For this reason, their failures may have effects on humans, making them safety-critical. On the other hand, the integration of computational capabilities brings the risks of cyberattacks that may have effects on confidentiality, integrity, availability, and also safety. In the industry, the cybersecurity risk analysis of cyber-physical systems is insufficiently automatized and error-prone. To tackle this open issue, we propose a modelbased approach using the formal language AltaRica and the industrial tool SimfiaNeo, to model systems, their behaviors in case of cyberattacks, and automatically generate the full set of attack scenarios leading to a safety-critical situation. In addition to the modeling, we propose a heuristic cutoff to reduce the state-space explosion. We end this position paper by evoking the remaining issues and future challenges of this work.