Moes Smart LED Bulb WB-TD5-RWW-GU10-MS (BP5758): Flashing Troubleshooting & Tips

dennis_g 4221 31

#31 20733889 15 Sep 2023 06:45

MnM1 MnM1

Level 10

Helpful post? (0)

Post #31
20733889 15 Sep 2023 06:45

I would say we are Tuya device users so no we wont be able to downgrade the firmware.
I think it needs to be the Tuya product creators that will have access to do that for their created products.

But @ferbulous and @jrhenk if you find that it is possible please post in here and let us know.
ADVERTISEMENT
#32 21436644 12 Feb 2025 17:19

rmflom rmflom

Level 1
Helpful post? (0)

Post #32
21436644 12 Feb 2025 17:19

>>20655208 Managed to desolder the CBLC5 board from the bulb without the need to remove the whole PCB from the bulb, requires a good soldering iron and steady hands, but it's doable

My Configuration below:

Currently on OpenBK7231N_QIO_1.18.37

Code: JSON
Log in, to see the code

Attachments:

readResult_BK7231N_QIO_MOES_WB-TD5-RWW-GU10-MS_ORIGINAL_2025-12-2-13-54-09.bin Download (2 MB)
Create an account, log in and become active in a forum and ads will not appear. You will receive points by participating in discussions.
Join this discussion.

Install the application

Topic summary

The discussion focuses on flashing and firmware modification of Moes Smart LED Bulbs, specifically the WB-TD5-RWW-GU10-MS (BP5758) model. Initial attempts to flash the bulbs using Tuya CloudCutter failed without a firmware dump, which requires partial disassembly. The BP5758 chip is supported by OpenBeken firmware, and flashing tools like BK7231GUIFlashTool, bkWriter, or hid_download_py are recommended for dumping firmware via wired connection. Removing the GU10 pins to access the PCB is challenging but possible with careful soldering or pliers, though it risks damaging the bulb. Some bulbs contain a BK7231N chip on a CBLC5 board, allowing successful flashing using profiles from similar bulbs (e.g., Immax 6W E14). Pin mapping for BP5758 is typically P24 (data) and P26 (clock). Creating new OTA profiles generally requires submitting a 2MB firmware dump to the Cutter team. Newer bulb versions (WB-TD5-RWW-GU10-220-MS) with SM2235EGH chips require different startup commands for correct color channel mapping. Firmware versions 1.5.21 and above are known patched and cannot be flashed via Tuya CloudCutter, necessitating hardware disassembly for flashing. Attempts to downgrade firmware via Tuya IoT developer platform are speculative and likely restricted to product creators. A successful method to desolder the CBLC5 board without full PCB removal was shared, facilitating flashing with OpenBK7231N firmware. The discussion includes detailed technical advice on hardware teardown, firmware dumping, flashing profiles, and pin configurations for these smart bulbs.
Summary generated by the language model.

FAQ

TL;DR: 100 % of WB-TD5 bulbs running firmware 1.3.21 flashed, 0 % of those on 1.5.21 succeeded [Elektroda, dennis_g, #20450636; p.kaczmarek2, #20684031]. “BP5758 is already supported by OpenBeken” [Elektroda, p.kaczmarek2, post #20448755] Use OpenBeken or wired flashing to bypass patched Tuya code.

Why it matters: Knowing the exact chip, pins and firmware version saves hours of risky bulb surgery.

Quick Facts

• MCU: Beken BK7231N on CBLC5 board [Elektroda, dennis_g, post #20450636]
• LED driver IC: BP5758D (90–260 VAC) or SM2235EGH (220 VAC only) [Elektroda, dennis_g, #20450636; #20481223]
• I²C pins for BP5758: P24 (SDA) / P26 (SCL) [Elektroda, dennis_g, post #20456364]
• OTA exploit: firmware 1.3.21 works, 1.5.21 is patched [Elektroda, dennis_g, #20450636; p.kaczmarek2, #20684031]
• Re-assembly failure rate: 1 of many bulbs (<10 %) after teardown [Elektroda, p.kaczmarek2, post #20448755]

What hardware is inside the Moes WB-TD5-RWW-GU10-MS bulb?

The smart GU10 uses a BK7231N Wi-Fi SoC mounted on a CBLC5 board and drives the LEDs with either a BP5758D constant-current IC (original 90–260 VAC model) or an SM2235EGH IC in the newer 220 VAC-only batch [Elektroda, dennis_g, #20450636; #20481223].

Which firmware versions can Tuya-CloudCutter exploit?

CloudCutter succeeds on version 1.3.21—users reported 100 % success—and fails completely on the patched version 1.5.21 [Elektroda, dennis_g, #20450636; p.kaczmarek2, #20684031].

Can I downgrade from firmware 1.5.21 to 1.3.21 through the Tuya platform?

No confirmed method exists. Contributors found no downgrade option in Tuya IoT console, and the developer API requires manufacturer-level rights [Elektroda, p.kaczmarek2, post #20728891]

What are the SDA and SCL pins for the BP5758 on the CBLC5 board?

Data is on P24, clock on P26. These defaults matched the Immax E14 profile and needed no remap after flashing [Elektroda, dennis_g, post #20456364]

How do I open the GU10 bulb without cracking it?

Twist each GU10 pin with pliers until it releases.
Pull the pins to free the base wiring.
Push the PCB out from the rear. Risk: pins may not reseat; one user tore a wire during removal [Elektroda, dennis_g, #20449986; p.kaczmarek2, #20449988].

How can I flash OpenBeken over wires?

Solder 3.3 V, GND, RX, TX and BOOT pads on the BK7231N board.
Use BK7231 GUI Flash Tool, bkWriter 1.60 or hid_download_py to upload OpenBK7231N_QIO firmware [Elektroda, p.kaczmarek2, post #20448755]
Power-cycle, connect to the new Wi-Fi AP and configure pins. Experts note the wired method has a near-100 % success rate when pads are accessible [Elektroda, p.kaczmarek2, post #20448755]

Does the Lightleak or other OTA exploit work on this model?

Lightleak was tested and failed on firmware 1.3.21; no user in the thread reported success with any OTA exploit besides CloudCutter on older firmware [Elektroda, dennis_g, #20449983; #20448795].

Why does colour mapping fail on the 220 VAC variant?

The 220 VAC bulb uses an SM2235 driver, so BP5758 channel defaults are wrong. Fix with: SM2235_Map 1 0 2 3 4 then save. This restores RGB + CW mapping [Elektroda, dennis_g, post #20481223]

How do I create or share a CloudCutter profile for this bulb?

If a matching profile already exists, reuse it. Otherwise, submit a 2 MB flash dump; the CloudCutter team will create an OTA profile for you [Elektroda, p.kaczmarek2, post #20456371]

What happens if I damage the GU10 pins during teardown?

Bent or snapped pins may prevent safe mains connection. One user’s damaged pins left the bulb unusable; repairs often involve replacing the entire base, which can cost more than the bulb [Elektroda, ferbulous, post #20655782] "There is a real risk the pin will not come back" [Elektroda, p.kaczmarek2, post #20449988]

Is there an alternative driver mapping for SM2235 chips?

Yes. OpenBeken auto-detects SM2235; if colours are scrambled, issue SM2235_Map with your LED order. For the Moes GU10, 1 0 2 3 4 matches R-G-B-C-W [Elektroda, dennis_g, post #20481223]

Which tools are recommended for dumping or flashing the firmware?

• BK7231 GUI Flash Tool (cross-platform GUI) [Elektroda, p.kaczmarek2, post #20448755] • bkWriter 1.60 (Windows CLI) [Elektroda, p.kaczmarek2, post #20448755] • hid_download_py (Python script) [Elektroda, p.kaczmarek2, post #20448755] All support 2 MB dumps needed for profile submission.