# Backdoor Account Discovered in More Than 100,000 Zyxel Firewalls, VPN Gateways

**URL:** <https://onehack.st/t/backdoor-account-discovered-in-more-than-100-000-zyxel-firewalls-vpn-gateways/168339>\
**Category:** News & Articles\
**Tags:** tools, technology, windows\
**Created:** [January 3, 2021, 6:16am UTC](https://onehack.st/t/backdoor-account-discovered-in-more-than-100-000-zyxel-firewalls-vpn-gateways/168339 "2021-01-03T06:16:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [January 3, 2021, 6:16am UTC](https://onehack.st/t/backdoor-account-discovered-in-more-than-100-000-zyxel-firewalls-vpn-gateways/168339/1 "2021-01-03T06:16:30Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/6/8/68e5f927b14c222fe6915229fde945563e50efbc.jpeg)

More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers [root access to devices via either the SSH interface or the web administration panel](https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/). From a report:

_The backdoor account, discovered by a team of Dutch security researchers from Eye Control, is considered as bad as it gets in terms of vulnerabilities. Device owners are advised to update systems as soon as time permits. Security experts warn that anyone ranging from DDoS botnet operators to state-sponsored hacking groups and ransomware gangs could abuse this backdoor account to access vulnerable devices and pivot to internal networks for additional attacks._