Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could send a specially crafted protocol message to a Routing and Remote Access Service (RRAS) server, which could lead to remote code execution (RCE) on the RAS server machine.

Security updates
10.0.17763.4974 — https://support.microsoft.com/help/5031361
10.0.20348.2031 — https://support.microsoft.com/help/5031364
10.0.22000.2538 — https://support.microsoft.com/help/5031358
10.0.19041.3570 — https://support.microsoft.com/help/5031356
10.0.22621.2428 — https://support.microsoft.com/help/5031354
10.0.10240.20232 — https://support.microsoft.com/help/5031377
10.0.14393.6351 — https://support.microsoft.com/help/5031362
6.0.6003.22317 — https://support.microsoft.com/help/5031416
6.0.6003.22317 — https://support.microsoft.com/help/5031411
6.1.7601.26769 — https://support.microsoft.com/help/5031408
6.1.7601.26769 — https://support.microsoft.com/help/5031441
6.2.9200.24523 — https://support.microsoft.com/help/5031442
6.2.9200.24523 — https://support.microsoft.com/help/5031427
6.3.9600.21620 — https://support.microsoft.com/help/5031419
6.3.9600.21620 — https://support.microsoft.com/help/5031407