If an admin user already exists on the hardware device, the web interface will instead require that specific admin user's ID and password for access. Login Credentials by Platform
Here is what an attacker can do with default credentials: zkteco web 3.0 default username and password