When you get an error, you normally get an error message as well - and it provides important information as to what problem the system has found with your code. And without that, you make our job a lot, lot harder...
Try this:
UPDATE [table] SET xxx =@abc WHERE ass ='23'
table
is an SQL keyword, so you need to let it know that you mean your table called "table" instead.