Reachable sets of hidden CPS sensor attacks