Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')