Microsofts own CVSS score says 'attack complexity' is low.

https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=...