CVE-2023-6935

CVE-2023-6935 describes a timing-based Bleichenbacher-style attack, known as the Marvin Attack, affecting the wolfSSL SP Math All RSA implementation when specifically configured with "--enable-all CFLAGS="-DWOLFSSL_STATIC_RSA"". This vulnerability, present in static RSA cipher suites, allows an attacker to decrypt ciphertexts and forge signatures after extensive probing, though it does not expose the server's private key. Rated as Medium severity (CVSS 5.9), the attack requires high attack complexity and network access, impacting confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.