UPnP has long been considered a liability by network administrators because of its ability to offer a path through a corporate firewall to devices that use the protocol.
FORBES: Disable This Buggy Feature On Your Router Now To Avoid A Serious Set Of Security Vulnerabilities