I wrote to NIST/NVD tis morning about the CVSS score (12+ hours ago now) they haven't got back to me.