From the tweet pics, it looks like the outside IP was able to connect to the camera via telnet. Does the camera firmware open a UPNP tunnel in AP to its telnet

From the tweet pics, it looks like the outside IP was able to connect to the camera via telnet. Does the camera firmware open a UPNP tunnel in AP to its telnet port? Does this guy's Wifi router enable anyone one to open tunnels in his AP router?