An attacker could obtain firmware files and reverse engineer their
intended use leading to loss of confidentiality and integrity of the
hardware devices enabled by the Qardio iOS and Android applications.
Credits
Bryan Riggins of Insulet Corporation reported these vulnerabilities to CISA.