You should assume your IoT junk is already compromised, that's why your IoT junk runs on a dedicated VLAN.
What kernel is the router managing these VLANs running?
Desktop Linux in typical setups? Consumer modems and routers?
What kernel is the router managing these VLANs running?