Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')