A DLL hijacking flaw in Lenovo Service Bridge could let a local authenticated user load a malicious DLL and run code with elevated privileges. This flaw aligns with CWE-427, where an attacker manipulates the dynamic link library loading process to execute arbitrary code. The resulting elevation would allow the user to perform operations that normally require higher rights, potentially affecting system integrity and confidentiality.

Lenovo Service Bridge on devices running versions earlier than 5.0.2.20 is affected. The product is available for a range of Lenovo systems that utilize the Service Bridge software, typically for remote management and diagnostic functions. All users who can obtain local authentication on these systems with access to the vulnerable Service Bridge component are at risk.

The CVSS score of 5.4 indicates a moderate severity, and the vulnerability requires local authenticated access, limiting the attack surface. No EPSS score is available, and the flaw is not listed in CISA's KEV catalog, suggesting that widespread exploitation has not been reported. Attackers would need to compromise a user account that can run Service Bridge or manipulate the DLL loading path locally. While the risk is not as high as remote attacks, the potential for privilege escalation warrants timely remediation.