Asus EZ Update is totally crap

Yago
3 min readApr 18, 2016

--

The Asus EZ Update is a software which supposedly updates the Asus motherboard’s software, drivers and BIOS. I installed it on a Windows 7 computer over 2 years ago and I have never received an update. Along this time many BIOS firmware versions came up for my Asus Z97-K motherboard but EZ Update never noticed it.

I captured some traffic with Wireshark to figure out what kind of data it was receiving. It turns out it queries a simple HTTP address with User-Agent as EASY UPDATE. In my case: http://liveupdate01.asus.com/pub/ASUS/LiveUpdate/Release/Motherboard/Z97-K.idx

Whireshark Screenshot

The response, an empty XML:

<product name="Z97-K">

</product>

Despite of the Z97-K download page lists many firmware versions, the ugly XML is empty.

Something similar happens with the Z97-PRO, the XML shows some outdated versions: http://liveupdate01.asus.com/pub/ASUS/LiveUpdate/Release/Motherboard/Z97-Pro.idx

<product name="Z97-PRO">

<item name="Z97-PRO BIOS 0902">
<description l_id="1033" title="Z97-PRO BIOS 0902">1. Update uCode for new Anniversary Edition CPU support.
2. Enhance accuracy for DRAM frequency.
3. Enhance security setting.
4. Enhance compatibility for ASUS ThunderboltEX II series cards.
5. Enhance stability for OC profile function.
6. Enhance legacy storage support for the RAID wizard in EZ Tuning Wizard function.
7. Change “Next Boot after AC Power Loss” setting to speed up PC boot time.</description>
<description l_id="1028" title="Z97-PRO BIOS 0902">1.增加對new Anniversary Edition CPU的支援.
2.增強DRMA頻率的準確性.
3.增強安全設置.
4.改善與ASUS ThunderboltEX II Series cards的相容性.
5.增強OC profile功能的穩定性.
6.在EZ Tuning Wizard function中增加對legacy storage的支援for RAID wizard.
7.修改“Next Boot after AC Power Loss”設定以減少系統啟動時間.</description>
<description l_id="2052" title="Z97-PRO BIOS 0902">1.增加对new Anniversary Edition CPU的支持.
2.增强DRMA频率的准确性.
3.增强安全设置.
4.改善与ASUS ThunderboltEX II Series cards的兼容性.
5.增强OC profile功能的稳定性.
6.在EZ Tuning Wizard function中增加对legacy storage的支持for RAID wizard.
7.修改“Next Boot after AC Power Loss”设定以减少系统启动时间.</description>
<type> BIOS </type>
<os> Win7,Win7(64),Win8,Win8(64),Win8_1,Win8_1(64) </os>
<version> 0902 </version>
<size> 5663839 </size>
<release-date> 1400198400 </release-date>
<zip-path> pub/ASUS/mb/LGA1150/Z97-PRO/Z97-PRO-ASUS-0902.zip </zip-path>
<execute> Z97-PRO-ASUS-0902.CAP </execute>
<index> 1 </index>
<reboot> 1 </reboot>
</item>

<item name="Z97-PRO BIOS 1204">
<description l_id="1033" title="Z97-PRO BIOS 1204">Enhance compatibility with some M.2 device.</description>
<description l_id="1028" title="Z97-PRO BIOS 1204">增強與某些M.2E設備的相容性</description>
<description l_id="2052" title="Z97-PRO BIOS 1204">增强与某些M.2E设备的兼容性</description>
<type> BIOS </type>
<os> Win7,Win7(64),Win8,Win8(64),Win8_1,Win8_1(64) </os>
<version> 1204 </version>
<size> 5681036 </size>
<release-date> 1404345600 </release-date>
<zip-path> pub/ASUS/mb/LGA1150/Z97-PRO/Z97-PRO-ASUS-1204.zip </zip-path>
<execute> Z97-PRO-ASUS-1204.CAP </execute>
<index> 2 </index>
<reboot> 1 </reboot>
</item>

</product>

It seems EZ Update downloads and flash the firmware from those links. I’m not brave enought to mock a server (or doing a MITM) for editing the XML content but I’m pretty sure it will be funny. The BIOS firmware might be signed but who knows…

Installing software

EZ Update allows to install software listed on the XML. An example of how doing it can be found on http://liveupdate01.asus.com/pub/ASUS/LiveUpdate/Release/Motherboard/A88XM-PLUS.idx

<product name="A88XM-PLUS">

<item name="USB 3.0 Boost">
<description l_id="1033" title="USB 3.0 Boost">AI Suite III-USB 3.0 Boost V1.06.20 Support Win7/Win8/Win8.1(All 32bit &amp; 64bit)</description>
<description l_id="1028" title="USB 3.0 Boost">AI Suite III-USB 3.0 Boost V1.06.20 Support Win7/Win8/Win8.1(All 32bit &amp; 64bit)</description>
<description l_id="2052" title="USB 3.0 Boost">AI Suite III-USB 3.0 Boost V1.06.20 Support Win7/Win8/Win8.1(All 32bit &amp; 64bit)</description>
<type> AP </type>
<os> WinXP,Win7,Win7(64),Win8,Win8(64),Win8_1,Win8_1(64) </os>
<version> 1.06.20 </version>
<size> 21419189 </size>
<release-date> 1394582400 </release-date>
<zip-path> pub/ASUS/mb/LGA1150/H81I-PLUS/AI_SuiteIII_USB30_Boost_10620.zip </zip-path>
<execute> .\Asussetup.exe%%-s </execute>
<index> 1 </index>
<reboot> 1 </reboot>
<swid> USB 3.0 Boost </swid>
</item>

</product>

--

--