CVE-2024-49105: Remote Desktop Client Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?

An authenticated attacker could exploit the vulnerability by triggering remote code execution (RCE) on the server via a Remote Desktop connection. Alternatively, an authenticated attacker could trigger guest-to-host RCE via a malicious program by connecting to the host using MMC.