I'm sorry, I didn't intend to start a nit-pick on whether or not all software contains bugs. My response was too glib.
The GP asked:
> If I have UPnP disabled, am I safe?
The answer is yes: If you can disable UPnP, your router will be safe from this particular exploit. Which is, I think, what he was asking.
Everyone should disable UPnP in their routers. It won't make your router "safe" from all exploits, but it will make it safe from this one, and you can do it now, immediately, without replacing hardware or firmware.
Thanks, my reply wasn't very good either. I suspect most people can disable UPnP without ever noticing a problem. If anything, it is more used by malware than anything you actually want.
The GP asked:
> If I have UPnP disabled, am I safe?
The answer is yes: If you can disable UPnP, your router will be safe from this particular exploit. Which is, I think, what he was asking.
Everyone should disable UPnP in their routers. It won't make your router "safe" from all exploits, but it will make it safe from this one, and you can do it now, immediately, without replacing hardware or firmware.