Compromising Critical Infrastructure: Unauthenticated RCE on Scada-LTS (CVE-2022-35420)

How I turned a competition distraction into a 0-day. This writeup covers the discovery and exploitation of CVE-2022-35420, an auth bypass in Scada-LTS that exposes critical industrial control systems to unauthenticated account takeover.