Card (CVE-11) / Bogue (CVE-9) class