Some WSD implementations accept a Set action. Fuzzing the metadata might reveal an action like SetSystemTime or ExecuteCommand (rare but happens in embedded devices).
PORT STATE SERVICE 5357/tcp open wsd
Port 5357 essentially hosts a built-in web server. If not properly managed, it can expose administrative interfaces for printers or IoT devices. Verdict for Pentesters port 5357 hacktricks