These devices may run outdated operating systems, lack regular updates, and have insufficient network segmentation; once compromised, attackers can move laterally within the internal network.