They could add a function to execute remote commands to the hosts, such as executing a telnet or blocking listening on some port.