Comment by QuiCasseRien

> A remote attacker with valid credentials can execute arbitrary commands on a server running an SSH service. The commands run on the target with the privileges of the authenticated account, and their output is returned to the attacker.

Well, isn't the purpose of SSH ? ^^