The Universal Plug and Play (UPnP) interface is highly vulnerable to use by hackers seeking to modify home router settings -- such as choice of DNS server -- from an external location, researchers warned.