Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.

Security updates
10.0.17763.5820 — https://support.microsoft.com/help/5037765
10.0.20348.2461 — https://support.microsoft.com/help/5037782
10.0.20348.2458 — https://support.microsoft.com/help/5037848
10.0.22000.2960 — https://support.microsoft.com/help/5037770
10.0.19044.4412 — https://support.microsoft.com/help/5037768
10.0.22621.3593 — https://support.microsoft.com/help/5037771
10.0.25398.887 — https://support.microsoft.com/help/5037781
10.0.10240.20651 — https://support.microsoft.com/help/5037788
10.0.14393.6981 — https://support.microsoft.com/help/5037763
6.0.6003.22668 — https://support.microsoft.com/help/5037800
6.0.6003.22668 — https://support.microsoft.com/help/5037836
6.1.7601.27117 — https://support.microsoft.com/help/5037780
6.1.7601.27117 — https://support.microsoft.com/help/5037803
6.2.9200.24868 — https://support.microsoft.com/help/5037778
6.3.9600.21972 — https://support.microsoft.com/help/5037823