Motherboard Vulnerability

Discussion in 'Software' started by peterr, Feb 5, 2020.

  1. peterr

    peterr MajorGeek

    Asus Z 390 Plus Gaming WiFi is the board in question.
    At the Asus site the firmware fie to update has a file beneath it that states there is a vulnerability but does not elaborate.
    My builder says he can do as recommended which is to simultaneously install both files together. He did make me aware of bricking possibilities.
    I realize I have a brick on one hand but am asking about vulnerabilities.
    I cannot ask you if it should be fixed if I cannot tell you what it is - are vulnerabilities on a boards usually something to be repaired? Do you have a general opinion?
    I have another year under warranty but don't think it applies here.
     
    AtlBo likes this.
  2. AtlBo

    AtlBo Major Geek Extraordinaire

    Did you attempt to contact Asus? I see "Chat with us" up top of the drivers page. Sounds to me that Asus is admitting to the vulnerability, so I don't see how following their instructions could void the warranty...
     
  3. peterr

    peterr MajorGeek

    I had not thought to call or contact them. Thanks a lot for the thought.
     
  4. AtlBo

    AtlBo Major Geek Extraordinaire

    I have used chat service for help with the phone etc. a good many times. Seems to work pretty well unless the problem is really complicated. Can't imagine they would be unwilling to help with your board under warranty etc...
     
  5. peterr

    peterr MajorGeek

    I chatted with them twice. After explaining a builder made the machine with an Asus mother board they said that attempting to fix it might brick it and suggested to leave it alone. Of course that was only the chat tier with limited knowledge abut warranties.
    The builder said he would be willing to do this for me but he too cautioned about a brick.
    I Googled authorized Asus repair but there is none near me in MD.
    I guess I am trying to weigh the risk of he vulnerability with damaging it.
    Asus is so big I am not going to speak with anyone.
    I don't know how skilled the builder is but he does not appear on the list of certified dealers for Asus. I guess the best of them can have something go wrong then I have lost a 1 year old machine.
    To complicate matters the firmware file is supposed to be installed simultaneously with the vulnerability fix.
    I guess this is why people buy from the likes of Dell.
     
  6. AtlBo

    AtlBo Major Geek Extraordinaire

    I thought I had bricked a board about a week ago working on an overclock. It is Biostar board, but the board had a self heal feature. It took many attempts over 4 days, but I was able to restore the BIOS by downloading it and putting BIOS download on a flash drive. The Biostar utility that was popping up in place of the BIOS screen finally read and copied the file, completing the restoration. Maybe your Asus board has something like this built into the PC. This Biostar board is from way back in the socket 775 days, probably 11-12 years old...

    Just did a check on the site. Take a look at this:

    https://www.asus.com/us/support/FAQ/1012219

    I think the days of bricking boards with BIOS updates are pretty much over really. For sure the old Biostar restore feature worked for me...

    EDIT: OK I see this is not related to BIOS. My mistake. Still I think I would try a phone call. That's a nice board, and I feel sure Asus would support your decision or at least give you some kind of a good option...
     
    Last edited: Feb 6, 2020
  7. peterr

    peterr MajorGeek

    Chat is now closed and I never have found a way to speak with someone. Once I found a number in the Orient.
    Anyway, thanks a lot for your help. I am going to see my builder.
    Do you think fixing the vulnerability is worth the risk of bricking? That was the original question? Just an opinion I would never hold anyone to.
     
  8. AtlBo

    AtlBo Major Geek Extraordinaire

    It would sure be nice to have all the information about the vulnerability. Looks like the Z 390 was released after knowledge of meltdown and spectre flaws were known of in the 370 and earlier boards. So I guess this vulnerability is different. Maybe this is your vulnerabilty here:

    https://www.techpowerup.com/248827/...-push-software-into-your-windows-installation

    Sounds really serious. I think I in your shoes I would pray and then take the board for the update, assuming Asus will not be of any assistance. Still I feel like there must be a way to get through to Asus if something goes wrong. As you said, it's a tough call only the board owner can make. Lol, I would probably try the update myself as cheap as I am.

    I think updating at Intel Management Engine should be safe enough. I about 7-8 tries I haven't yet had a problem updating firmware.
     
    baklogic likes this.
  9. peterr

    peterr MajorGeek

    Your help has been invaluable.
    Thank you - off to the builder.
     
    AtlBo likes this.
  10. AtlBo

    AtlBo Major Geek Extraordinaire

    Good luck. May the source be with you...
     
    peterr likes this.
  11. peterr

    peterr MajorGeek

    I began the thread so wanted to finish it.

    I finally installed/updated the latest firmware file without the read me. It takes care of the Asus vulnerability which is quite widespread.

    I find performance quite snappy now. Those with Asus boards should look into the vulnerability.
     
    satrow and AtlBo like this.
  12. AtlBo

    AtlBo Major Geek Extraordinaire

    Congratulations :) Nice when a plan comes together...:D
     
    peterr likes this.

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds