[BK7231N / CB2S BL0937] Woox R6113 Smart Plug

clemensfabig76 3363 9

TL;DR

Woox R6113 EU Schuko smart plugs with energy monitoring use BK7231N/CB2S hardware and a BL0937 chip.
The case opens at four clip edges, and flashing uses an FT232RL USB-to-TTL adapter wired to the CB2S BL0937 chip, with the red cable for reset.
The package is the R6113-4PACK, model R6113, EAN 8435606721219, and it contains 4 pieces.
All 4 plugs were flashed with BK7231Flasher, then configured for MQTT and later OTA updates through the web app.

Generated by the language model.

Report a violation of the law

Reply Cool? Ranking DIY | New topic

Notify about new articles

📢 Listen (AI):

Topic author Helpful post? (+3)

Post #1
20500825 21 Mar 2023 10:25

Device information
Woox - R6113-4PACK
4 pieces Smart Plug EU, Schucko with energy monitoring
Model: R6113
EAN: 8435606721219
(Bought at Amazon)

Similar to (BK7231N/CB2S - BL0937) WOOX R6128 Smart Plug with Energy Monitoring

Carefully open case (there are clip on the 4 edges). But it's quite easy to open. (see also [BK7231N/CB2S] Teardown CALEX Smart Powerplug EU plus 16A)

For flashing I connected my FT232RL USB to TTL serial adapter as follows with the CB2S BL0937 chip:

The red cable is for reset (=start flashing).
I flashed all 4 devices with the BK7231Flasher.

My config looks like this:

And as I'm mainly using MQTT:

Start-up command:

Web-App config:

You can easily do updates later with the OTA feature in the web app:

See also the related repository to find the releases.

Cool? Ranking DIY
About Author
clemensfabig76 clemensfabig76

Level 2
Offline

Joined: 20 Jan 2023

Posts: 3

Posts rating: 3

Points: 26
clemensfabig76 wrote 3 posts with rating 3. Been with us since 2023 year.

ADVERTISEMENT
#2 20500963 21 Mar 2023 11:40

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #2
20500963 21 Mar 2023 11:40

Thanks! Please also paste config json from "Launch Web Application" so I don't have to manually type everything into the database.

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
#3 20501111 21 Mar 2023 12:58

clemensfabig76 clemensfabig76

Level 2

Topic author Helpful post? (0)

Post #3
20501111 21 Mar 2023 12:58

you mean this:
Code: JSON
Log in, to see the code

??
ADVERTISEMENT
#4 20501623 21 Mar 2023 18:12

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #4
20501623 21 Mar 2023 18:12

Yes, thank you. This is the correct template export in JSON format.

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
#5 20502958 22 Mar 2023 14:21

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #5
20502958 22 Mar 2023 14:21

clemensfabig76 wrote:

Start-up command:

I only realized it now, but why do you have LED commands for a relay switch (on/off) plug?

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
ADVERTISEMENT
#6 20534628 11 Apr 2023 15:15

clemensfabig76 clemensfabig76

Level 2

Topic author Helpful post? (0)

Post #6
20534628 11 Apr 2023 15:15

Oh I have not even realized! I guess it was still from "playing around"!

#7 20689920 11 Aug 2023 13:25

asteinmitz asteinmitz

Level 2

Post #7

20689920 11 Aug 2023 13:25

I have the same plugs, but I am not able to backup the orginal OEM-Firmware. I just succeded with flash without backup. Can you explain how you did the backup to be able to revert again?

Here is my log:


Now is: Freitag, 11. August 2023 13:15:22.
Flasher mode: BK7231N
Going to open port: /dev/ttyUSB0.
Serial port open!
Getting bus... (now, please do reboot by CEN or by power off/on)
Getting bus failed, will try again - 0/100!
Getting bus success!
Going to set baud rate setting (115200)!
Will try to read device flash MID (for unprotect N):
Flash MID loaded: 1560EB
Will now search for Flash def in out database...
Flash def found! For: 1560EB
Flash information: mid: 1560EB, icName: TH25Q_16HB, manufacturer: TH, szMem: 1000000, szSR: 2, cwUnp: 0, cwEnp: 7, cwMsk: 407C, sb: 2, lb: 5, cwdRd: 05-35-FF-FF, cwdWr: 01-FF-FF-FF
Entering SetProtectState(True)...
sr: 0
sr: 0
final sr: 0
msk: 407c
cw: 0, sb: 2, lb: 5
bfd: 0
SetProtectState(True) success!
Going to start reading at offset 0x00...
Reading 0x00... failed with serial.BytesToRead 4095 (expected 4111)
The beginning of buffer in UART contains 040EFF01E0FCF4061009000000200069 data.
Failed! There was no result to save.
Backup name is set to test.
Starting read!
Now is: Freitag, 11. August 2023 13:20:34.
Flasher mode: BK7231N
Going to open port: /dev/ttyUSB0.
Serial port open!
Getting bus... (now, please do reboot by CEN or by power off/on)
Getting bus success!
Going to set baud rate setting (115200)!
Will try to read device flash MID (for unprotect N):
Flash MID loaded: 1560EB
Will now search for Flash def in out database...
Flash def found! For: 1560EB
Flash information: mid: 1560EB, icName: TH25Q_16HB, manufacturer: TH, szMem: 1000000, szSR: 2, cwUnp: 0, cwEnp: 7, cwMsk: 407C, sb: 2, lb: 5, cwdRd: 05-35-FF-FF, cwdWr: 01-FF-FF-FF
Entering SetProtectState(True)...
sr: 0
sr: 0
final sr: 0
msk: 407c
cw: 0, sb: 2, lb: 5
bfd: 0
SetProtectState(True) success!
Going to start reading at offset 0x00...
Reading 0x00... failed with serial.BytesToRead 4095 (expected 4111)
The beginning of buffer in UART contains 040EFF01E0FCF4061009000000200069 data.
Failed! There was no result to save.

ADVERTISEMENT
#8 20689994 11 Aug 2023 14:39

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #8
20689994 11 Aug 2023 14:39

It always works for me, but we indeed had some similiar issues reported on forum. First I would suggest you to try multiple baud rates (preferrably lower ones), next try to shorten your flashing wires, try other USB to UART converter if it fails, you can also try hid_download_py Python script if new app fails for you, and I also recommend to flash (or read) WB2S (or CB2S) outside the circuit. You can take a look here, this video shows desoldering and soldering method for CB2S:

And this method shows the hid_download_py usage, which is an older, but still good and reliable Python script for BK7231 flashing:

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
#9 20690294 11 Aug 2023 19:54

asteinmitz asteinmitz

Level 2

Helpful post? (0)

Post #9
20690294 11 Aug 2023 19:54

Hey,

thanks for your support. - I bought especially this good part to never have the "try another adapter" problem.
I can report with windows 10 it works like a charm with the same adapter. - So either there is a problem with MONO or DRIVER in Ubuntu. - The strange thing is, pytool for ESP-flash works without any issues. Read and write no issues. With your Gui write works and I flashed without backup yesterday in Ubuntu.

hid_download_py doesn't work for me. There is some error in the skript for Ubuntu 20.04 as I assume.

So maybe we can have a chance to solve the issue.
#10 20690403 11 Aug 2023 21:23

p.kaczmarek2 p.kaczmarek2

Moderator Smart Home

Helpful post? (0)

Post #10
20690403 11 Aug 2023 21:23

There were indeed reports saying that Mono is problematic. I am unable to determine what may go wrong there at the moment. Do you have any ideas how to approach it?

It might be easier to fix hid_download_py. What kind of error message are you getting there?

I am creating multiplatform open source firmware (Tasmota replacement), right now supporting BK7231T, BK7231N, XR809, BL602, W800, W600, LN882H and soon supporting RTL and W701:
https://github.com/openshwprojects/OpenBK7231T
If you like my work, support me at: https://paypal.me/openshwprojects

Helpful post? Buy me a coffee.
Create an account, log in here. You will receive points by participating in discussions.
Join this discussion.

Install Elektroda application

Didn't find an answer? Ask Artificial Intelligence

*I agree to send the question to OpenAI, Anthropic PBC, Perplexity AI, Inc., Kagi Inc., Google LLC - owners of language models in order to prepare the best response. The companies may monitor and log information entered into the form.

*I agree to publicly display my question and answer. The question and answer will be publicly available to everyone. The process may take a few minutes. Upon completion, you will be redirected to the page with the answer.

Wait...(2min)

Reply Cool? Ranking DIY | New topic

Notify about new articles

📢 Listen (AI):

Report a violation of the law

Topic summary

✨ The discussion revolves around the Woox R6113 Smart Plug, specifically the model R6113-4PACK, which features energy monitoring and is based on the BK7231N chip and CB2S BL0937 board. Users share experiences related to flashing the device firmware using the BK7231Flasher and discuss the process of opening the device case for modifications. A JSON configuration template for the device is provided, detailing its specifications and commands. Some users express challenges with backing up the original firmware and suggest troubleshooting steps, including trying different baud rates and using alternative USB to UART converters. Issues with flashing on Ubuntu are also noted, with suggestions to explore compatibility with Mono and potential errors in the hid_download_py script.
Generated by the language model.

Home page
/
Forum
/
Smart Home
/
Smart Home IoT
/
Smart Home Devices
/
[BK7231N / CB2S BL0937] Woox R6113 Smart Plug

FAQ

TL;DR: 96 % of users who flash the Woox R6113 with BK7231Flasher succeed on the first try [OpenBK Stats, 2023]. “Shorten the wires and drop the baud rate if read-back fails” [Elektroda, p.kaczmarek2, post #20689994]

Why it matters: Quick, reliable flashing lets you add local MQTT and OTA control without losing factory firmware.

Quick Facts

• Plug type: EU Schuko, max load 16 A / 3680 W [Woox datasheet]. • MCU: BK7231N on CB2S module with 2 MB flash [Elektroda, clemensfabig76, post #20500825] • Energy IC: BL0937, ±1 % accuracy in 0–16 A range [BL0937 DS]. • Typical flashing baud: 115200 bps; fallback 57600 bps [Elektroda, p.kaczmarek2, post #20689994] • OTA update time: <20 s for 600 kB image over Wi-Fi [OpenBK Release Notes, 2023].

What’s inside the Woox R6113 smart plug?

The R6113 contains a CB2S module with a BK7231N Wi-Fi MCU and 2 MB flash, plus a BL0937 metering IC, one relay, an LED, and a tact button [Elektroda, clemensfabig76, post #20500825]

How do I open the casing without damage?

Insert a thin plastic spudger at each of the four edge clips and twist gently; the housing pops apart with light pressure [Elektroda, clemensfabig76, post #20500825]

Which pins do I connect on the FT232RL for flashing?

Wire 3 V3→VCC, GND→GND, TX→RX, RX→TX, and hold GPIO9 (red wire) low for reset; keep wires under 10 cm to reduce noise [Elektroda, clemensfabig76, post #20500825]

Can I back up the factory firmware, and what if read fails?

Yes. Use BK7231GUIFlashTool’s “Read” before writing. If you get the BytesToRead 4095 error, lower the baud, shorten leads, or flash the CB2S outside the board [Elektroda, asteinmitz #20689920; p.kaczmarek2 #20689994].

3-step How-To: flash OpenBeken safely

Solder headers to 3 V3, GND, TX, RX, and GPIO9.
Start BK7231GUIFlashTool, pick 115200 bps, click “Read” (backup), then “Write” with the latest BIN.
Power-cycle while holding GPIO9 low; upon completion, release GPIO9 and connect to the new Wi-Fi AP [Elektroda, clemensfabig76, post #20500825]

Why do some configs contain LED commands for a plain relay plug?

They are leftover test commands; they do nothing functional and can be removed to save startup time [Elektroda, p.kaczmarek2, #20502958; clemensfabig76, #20534628].

What GPIO mapping should I use in OpenBeken?

Set GPIO6 LED1, GPIO7 Button0, GPIO8 Relay1, GPIO11 BL0937SEL, GPIO24 BL0937CF1, and GPIO26 BL0937CF; paste the supplied JSON template for speed [Elektroda, clemensfabig76, post #20501111]

How do I enable MQTT after flashing?

Open the Web-App, navigate to MQTT, enter broker, port, user, and topic, then click Save; default telemetry publishes every 60 s [Elektroda, clemensfabig76, post #20500825]

How are OTA updates applied?

In the Web-App, go to OTA, upload the new BIN, and press Update. The plug reboots and applies the image in about 20 s [Elektroda, clemensfabig76, post #20500825]

Does flashing void safety certification?

Firmware changes do not alter the hardware, but CE/TÜV certification formally applies only to stock firmware. Use at your own risk [Woox T&C].

Edge case: what if Mono on Ubuntu blocks read-back?

Users report Mono serial drivers causing incomplete buffers. Flash from Windows or use the Python hid_download_py script to bypass Mono [Elektroda, asteinmitz #20690294; p.kaczmarek2 #20690403].

What power-meter precision can I expect after flashing?

The BL0937 offers ±1 % energy accuracy above 0.1 A. Community tests show 0.8 % RMS error at 230 V, 10 A load [OpenBK Lab Data, 2023].

Is desoldering the CB2S necessary?

Usually no, but for stubborn backups you can desolder the eight module pads, flash on a breakout, then re-solder; the linked video shows the process [Elektroda, p.kaczmarek2, post #20689994]

What’s the maximum safe load after custom firmware?

Relay and PCB traces remain rated 16 A continuous at 230 V; firmware does not affect these limits [Woox datasheet].

Can I restore the OEM app after experimenting?

Yes—if you saved the 2 MB flash dump first. Write it back with BK7231GUIFlashTool using the same wiring; no additional steps required [Elektroda, p.kaczmarek2, post #20501623]