Hmmm...
On the cam in the same config section where you found the UPnP setting, look under the tab there that says "Platform Access" and see if that's enabled. If so, then disable the check box and blank out whatever else you can.
Run the ShieldsUp scan again and see if there's anything reported.
Beyond that, not sure what else to check. Could be unrelated to security, especially if running some hacked firmware, but that's the usual issue with changed passwords on those cams (and many others).
I can not access the camera period.
I have not changed anything as far as firmware or software since I purchased and installed it.
Results from scan of ports: 0-1055
0 Ports Open
2 Ports Closed
1054 Ports Stealth
---------------------
1056 Ports Tested
NO PORTS were found to be OPEN.
Ports found to be CLOSED were: 80, 554
Other than what is listed above, all ports are STEALTH.
TruStealth: FAILED - NOT all tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received.