Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')