CVE-2023-6935
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2023-6935 is a vulnerability that affects the wolfSSL SP Math All RSA implementation when built with specific options. The vulnerability, known as the Marvin Attack, is a timing Bleichenbacher style attack and can be exploited by an attacker to decrypt ciphertexts and forge signatures. However, it does not expose the server's private key. This vulnerability is specific to static RSA cipher suites and affects wolfSSL versions prior to 3.6.6. To remediate this vulnerability, it is recommended to disable the use of static RSA cipher suites or update to wolfSSL version 3.6.6 or later. The potential danger of this vulnerability lies in the possibility of unauthorized access to sensitive information due to the decryption and signature forging capabilities it provides to attackers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions