Broadcom UPnP implementation also contains critical vulnerability, researchers say