It blows my mind that any would be accessible from the internet. These devices shouldn't be networked at all if possible. But at the very least they should be on their own network, preferably physically isolated instead of VLANs.