[WBR3] [W701-VA2-CG] ME86H thermostat

I replaced the WBR3 module with a CB3S that I had in stock.
I had previously overheard the communication and testify to the following...:

dpID Type Values

1 Bool (1) 1-ON, 0-OFF
2 Enum (4) 1-manual, 0-auto
24 Val (2) Current temperature
16 Val (2) Set temperature
103 Bool (1) Antifreeze (0-off, 1-on)
40 Bool (1) Child look (0-off, 1-on)
36 Enum (4) Relay status (0-on, 1-off)

Advanced settings after entering the device menu (Advanced setting):

19 Val (2) Max. temperature
26 Val (2) Min. temperature
106 Val (2) Temperture difference start
27 Val (2) Temperature calibration
43 Enum (4) Sensor mode 0-built in, 1-external, 2-dual
104 Enum (4) Programming mode 0-off, 1-double break, 2-single break, 3-no day off
45 Bitmap (5) ?
104 Enum (4) ?
23 Enum (4) 0- celsius, 1-fahrenheit

After switching to Fahrenheit..:

105 Val (2) Temperature calibration (F)
29 Val (2) Current temperature (F)
18 Val (2) Max. temperature (F)
20 Val (2) Min. temperature (F)
107 Val (2) Temperture difference start (F)
17 Val (2) Set temperature (F)

Pin A_2 WBR3 ( P26 CB3S) must be pulled low, LED - is connected to it.
The appearance and operation of the ME86H is very similar to the BHT-002 (WHT-002).
The difference is that in the BHT (WHT) the ON/OFF button lights up in the same colour permanently and in the ME86H it lights up green when the contactor is active and red when it is not active.
In addition, in the BHT (WHT) there was an ECO mode function, i.e. a freely adjustable temperature height during absence, activated by a button, after deactivation the temperature returned to the last memorised desired temperature.
In the ME86H, on the other hand, there is the Antifreeze function which, when activated, switches on the contactor when the temperature is between 5 and 7 *C when the thermostat is switched off.
Another difference is that in the version for boiler or heating valve actuator control, instead of an input for an external temperature sensor (as in the version for electric underfloor heating) there is an additional potential-free contact and an attempt to change the setting for "Sensor mode" ends with an error message.

How to access the removed WBR3 module ? How can it be read ?

tomik67 wrote:

Pin A_2 of WBR3 (P26 CB3S) must be pulled low, the LED -.

is connected to it.
After careful examination of another ME86H I found that pin P26 (CB3S, WB3S) should be defined as WifiLED_n

thank you for the resources you provided off-thread.
just curious, was the device with the ME86H-WIFIMBXIN-V1.5 marking on the PCB also labelled as ME86H on the box/chassis?

Did you have a couple of different but similar devices with WBR3, the aforementioned BHT-002 (WHT-002) also?

Added after 4 [hours] 46 [minutes]:

whatever the case, here's what can be found in the two fw variations:

Binaries will land here when PR merged https://github.com/openshwprojects/FlashDumps/tree/main/IoT/RTL8720CF

Tuya_ME86H_Thermostat_(ME82-schemaID-000003yzj6_psssxcwgbx6m9apv)_TuyaMCU_WBR3_2.5.2.bin

Paired storage area content:


Paired UART boot log (TuyaMCU simulator used):


dpIDs:


Tuya app pics:


Added after 15 [minutes]:

Tuya_Avatto_WT200_Thermostat_(Temp-schemaID-00000035fb_gw173aldekvpzalg)_TuyaMCU_WBR3_2.5.2.bin

Paired storage area content:


Paired UART boot log (TuyaMCU simulator used):


dpIDs:


Tuya app pics:

Thermostat ME86 WiF and it was so labelled on the packaging as well, I bought it here:
Link .

Other thermostats from WBR3 that I have reworked are AVATTO WT200 such as in the link below, only when I bought them they cost three times less...:
Link .

Attached is the user manual AVATTO WT200 , I only have it in Polish.

Thermostats BHT-002 there were many versions with different MCUs and modules, in the beginning there were TYWE3S , there were Tasmota modifications for this thermostat:
Link .

Then changed TYWE3S to CB3S and then I took care of them, WB3S but then the thermostat should be correctly labelled as WHT-002 which is not always the case and misleads buyers into believing they are buying BHT-002 .