The software executes asynchronous commands synchronously by utilizing a separate process. An attacker who can identify the correct port and bypass firewall restrictions can load and execute arbitrary JavaScript files residing on the server hosting the service.