Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')