The D-Link DIR-600L Hardware Revision B1 device contains a hardcoded telnet backdoor with a static username and password, allowing unauthenticated local network attackers to gain root shell access. This device is end-of-life and will not receive patches. The vulnerability has a critical severity with a CVSS score of 9.8.