Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?
An authenticated attacker could send a specially crafted protocol message to a Routing and Remote Access Service (RRAS) server, which could lead to remote code execution (RCE) on the RAS server machine.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Security updates
10.0.17763.7434 — https://support.microsoft.com/help/5060531
10.0.20348.3807 — https://support.microsoft.com/help/5060526
10.0.20348.3745 — https://support.microsoft.com/help/5060525
10.0.19044.5965 — https://support.microsoft.com/help/5060533
10.0.22621.5472 — https://support.microsoft.com/help/5060999
10.0.26100.4349 — https://support.microsoft.com/help/5060842
10.0.26100.4270 — https://support.microsoft.com/help/5060841
10.0.25398.1665 — https://support.microsoft.com/help/5060118
10.0.10240.21034 — https://support.microsoft.com/help/5060998
10.0.14393.8148 — https://support.microsoft.com/help/5061010
6.0.6003.23351 — https://support.microsoft.com/help/5061026
6.0.6003.23351 — https://support.microsoft.com/help/5061072
6.1.7601.27769 — https://support.microsoft.com/help/5061078
6.1.7601.27769 — https://support.microsoft.com/help/5061036
6.2.9200.25522 — https://support.microsoft.com/help/5061059
6.3.9600.22620 — https://support.microsoft.com/help/5061018