This appears to be an issue caused by VLAN tagging. The default VLAN tag 2 for internet is applying to LAN ports and wireless by default. The ISP website says that VLAN tags do not need to be applied to wireless but this cannot be changed for the default internet VLAN. See below setting from ISP website for VLAN tagging:
The information I have found says that a VLAN bridge may need to be created so Wi-Fi and LAN communications do not need to pass through the router Network Address Translation.
FYI we were able to communicate with CCTV device on LAN via Wi-Fi after we did a factory restore and no VLAN tagging enabled.
It's possible that VLAN could be causing it but lets take a look at some other options first. Most WiFi issues I've seen are to do with smart connect being enabled as not all devices support it very well, especially older devices. Have you tried disabling smart connect and connecting directly to 2.4GHz?